Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5712
HistoryJan 17, 2018 - 5:35 a.m.

Cross-site Scripting (XSS)

2018-01-1705:35:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3

0.001 Low

EPSS

Percentile

32.7%

Kibana is vulnerable to cross-site scripting (XSS) attacks. These attacks are possible through the color field formatter because the value wasn’t being escaped.

CPENameOperatorVersion
kibanaeq5.1.1
kibanale5.6.6
kibanale6.1.2

0.001 Low

EPSS

Percentile

32.7%