Description
Kibana before 4.5.4 and 4.1.11 are vulnerable to an XSS attack that would allow an attacker to execute arbitrary JavaScript in users' browsers.
Remediation
References
http://www.securityfocus.com/bid/99179
https://www.elastic.co/community/security
Related Vulnerabilities
CVE-2019-18413 Vulnerability in npm package class-validator
CVE-2019-20149 Vulnerability in npm package kind-of
CVE-2022-36919 Vulnerability in maven package org.jenkins-ci.plugins:coverity
CVE-2022-29567 Vulnerability in maven package com.vaadin:vaadin-grid-flow
CVE-2021-23463 Vulnerability in maven package com.h2database:h2