CVE-2021-22141
Fixed in a distro release EPSS <1%CVSS 6.1
An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user visits a maliciously crafted URL, it could result in Kibana redirecting the user to an arbitrary website.
Products: Elastic Kibana
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-installation | 8.20211112-1.38.1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-operations | 8.20211112-1.38.1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-opsconsole | 8.20211112-1.38.1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-planning | 8.20211112-1.38.1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-security | 8.20211112-1.38.1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-user | 8.20211112-1.38.1 |
| SUSE HPE Helion OpenStack 8 | kibana | 4.6.6-3.12.1 |
| SUSE HPE Helion OpenStack 8 | openstack-keystone | 12.0.4~dev11-5.36.1 |
| SUSE HPE Helion OpenStack 8 | openstack-keystone-doc | 12.0.4~dev11-5.36.1 |
| SUSE HPE Helion OpenStack 8 | openstack-monasca-notification | 1.10.2~dev4-3.9.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-keystone | 12.0.4~dev11-11.45.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-monasca | 2.2.2~dev1-11.45.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-installation | 8.20211112-1.38.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-operations | 8.20211112-1.38.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-opsconsole | 8.20211112-1.38.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-planning | 8.20211112-1.38.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-security | 8.20211112-1.38.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-supplement | 8.20211112-1.38.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-upstream-admin | 8.20211112-1.38.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-upstream-user | 8.20211112-1.38.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-user | 8.20211112-1.38.1 |
| SUSE OpenStack Cloud 8 | kibana | 4.6.6-3.12.1 |
| SUSE OpenStack Cloud 8 | openstack-keystone | 12.0.4~dev11-5.36.1 |
| SUSE OpenStack Cloud 8 | openstack-keystone-doc | 12.0.4~dev11-5.36.1 |
| SUSE OpenStack Cloud 8 | openstack-monasca-notification | 1.10.2~dev4-3.9.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-keystone | 12.0.4~dev11-11.45.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-monasca | 2.2.2~dev1-11.45.1 |
| SUSE OpenStack Cloud 9 | ardana-ansible | 9.0+git.1628097238.f6cbb0e-3.29.1 |
| SUSE OpenStack Cloud 9 | ardana-monasca | 9.0+git.1627995376.30bdf85-3.25.1 |
| SUSE OpenStack Cloud 9 | influxdb | 1.3.8-4.6.1 |
| SUSE OpenStack Cloud 9 | kibana | 4.6.6-4.12.1 |
| SUSE OpenStack Cloud 9 | openstack-cinder | 13.0.10~dev23-3.31.2 |
| SUSE OpenStack Cloud 9 | openstack-ec2-api | 7.1.1~dev6-3.3.2 |
| SUSE OpenStack Cloud 9 | openstack-heat-gbp | 12.0.1~dev4-3.6.1 |
| SUSE OpenStack Cloud 9 | openstack-heat-templates | 0.0.0+git.1628179051.7d761bff-3.12.1 |
| SUSE OpenStack Cloud 9 | openstack-horizon-plugin-gbp-ui | 12.0.1~dev5-3.6.1 |
| SUSE OpenStack Cloud 9 | openstack-keystone | 14.2.1~dev7-3.25.2 |
| SUSE OpenStack Cloud 9 | openstack-neutron-gbp | 14.0.1~dev19-3.28.1 |
| SUSE OpenStack Cloud 9 | openstack-nova | 18.3.1~dev91-3.40.1 |
| SUSE OpenStack Cloud 9 | python-eventlet | 0.20.0-8.3.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-barbican | 7.0.1~dev24-3.25.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-cinder | 13.0.10~dev23-3.28.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-designate | 7.0.2~dev2-3.25.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-glance | 17.0.1~dev30-3.23.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-heat | 11.0.4~dev4-3.25.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-horizon | 14.1.1~dev11-4.29.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-ironic | 11.1.5~dev17-4.23.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-keystone | 14.2.1~dev7-3.26.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-magnum | 7.2.1~dev1-4.25.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-manila | 7.4.2~dev60-3.31.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-monasca | 2.7.1~dev10-3.23.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-monasca-ceilometer | 1.8.2~dev3-3.25.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-neutron | 13.0.8~dev164-6.29.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-nova | 18.3.1~dev91-3.29.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-octavia | 3.2.3~dev7-4.25.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-sahara | 9.0.2~dev15-3.25.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-swift | 2.19.2~dev48-2.20.1 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-deployment | 8.20211112-1.38.1 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-supplement | 8.20211112-1.38.1 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-upstream-admin | 8.20211112-1.38.1 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-upstream-user | 8.20211112-1.38.1 |
| SUSE OpenStack Cloud Crowbar 8 | kibana | 4.6.6-3.12.1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-keystone | 12.0.4~dev11-5.36.1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-keystone-doc | 12.0.4~dev11-5.36.1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-monasca-notification | 1.10.2~dev4-3.9.1 |
| SUSE OpenStack Cloud Crowbar 9 | crowbar-openstack | 6.0+git.1630614261.26948f746-3.37.2 |
| SUSE OpenStack Cloud Crowbar 9 | influxdb | 1.3.8-4.6.1 |
| SUSE OpenStack Cloud Crowbar 9 | kibana | 4.6.6-4.12.1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-cinder | 13.0.10~dev23-3.31.2 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-ec2-api | 7.1.1~dev6-3.3.2 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-heat-gbp | 12.0.1~dev4-3.6.1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-heat-templates | 0.0.0+git.1628179051.7d761bff-3.12.1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-horizon-plugin-gbp-ui | 12.0.1~dev5-3.6.1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-keystone | 14.2.1~dev7-3.25.2 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-neutron-gbp | 14.0.1~dev19-3.28.1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-nova | 18.3.1~dev91-3.40.1 |
| SUSE OpenStack Cloud Crowbar 9 | python-eventlet | 0.20.0-8.3.1 |
| SUSE OpenStack Cloud Crowbar 9 | rubygem-puma | 2.16.0-4.15.1 |
| SUSE OpenStack Cloud Crowbar 9 | rubygem-redcarpet | 3.2.3-4.3.1 |