Description

Cross-site request forgery (CSRF) vulnerability in Elasticsearch Kibana before 4.1.3 and 4.2.x before 4.2.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Remediation

References

http://www.securityfocus.com/archive/1/536935/100/0/threaded

https://www.elastic.co/community/security/

Related Vulnerabilities

CVE-2019-10466 Vulnerability in maven package org.jenkins-ci.plugins.plugin:fireline

CVE-2023-45138 Vulnerability in maven package org.xwiki.contrib.changerequest:application-changerequest-ui

CVE-2020-35510 Vulnerability in maven package org.jboss.remoting:jboss-remoting

CVE-2019-10080 Vulnerability in maven package org.apache.nifi:nifi-commons

CVE-2023-23623 Vulnerability in npm package electron

Severity

Critical

Classification

CWE-352

Tags

Vendor Advisory