Description
Kibana before 4.5.4 and 4.1.11 are vulnerable to an XSS attack that would allow an attacker to execute arbitrary JavaScript in users' browsers.
Remediation
References
http://www.securityfocus.com/bid/99179
https://www.elastic.co/community/security
Related Vulnerabilities
CVE-2021-23444 Vulnerability in npm package jointjs
CVE-2017-11556 Vulnerability in npm package node-sass
CVE-2016-10600 Vulnerability in npm package webrtc-native
CVE-2022-48216 Vulnerability in npm package @uniswap/universal-router
CVE-2023-46589 Vulnerability in maven package org.apache.tomcat:tomcat-catalina