CVE-2016-1000218

HIGH 8.8CVE-2016-1000218 · Published 16/06/2017 · updated 17/06/2026

In short

CVE-2016-1000218 is a HIGH (CVSS 8.8) vulnerability affecting kibana reporting (elastic).
Chance of exploitation in the next 30 days (EPSS): 0.81%, higher than 57.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
kibana reporting elastic	`= 2.4.0`	No fix yet

Description

Kibana Reporting plugin version 2.4.0 is vulnerable to a CSRF vulnerability that could allow an attacker to generate superfluous reports whenever an authenticated Kibana user navigates to a specially-crafted page.

References

securityfocus.com/bid/99253 · Third Party Advisory
elastic.co/community/security · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free