CVE-2019-7608

Fixed in a distro release EPSS 1%

Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.

Published 2019-03-25 · CVE record · OSV

Products: Elastic Kibana

Distro releases