GHSA-m6gg-86c6-gfr9
Withdrawn: Cross-site Scripting in Kibana
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.elasticsearch:elasticsearch | >= 7.16.0, < 7.17.1 | 7.17.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
##Withdrawn: This advisory is for Kibana, not ElasticSearch as it was originally published, and is withdrawn as being out of scope of our supported ecosystems.
A cross-site-scripting (XSS) vulnerability was discovered in the Data Preview Pane (previously known as Index Pattern Preview Pane) which could allow arbitrary JavaScript to be executed in a victim's browser.
References
External links from the advisory. They lead to third-party sites.