| Package | Affected versions | Patched versions |
|---|---|---|
| kibana | ≥ 7.0.0, < 7.7.1< 6.8.10 | 7.7.16.8.10 |
Kibana versions before 6.8.9 and 7.7.0 contains a stored XSS flaw in the TSVB visualization. An attacker who is able to edit or create a TSVB visualization could allow the attacker to obtain sensitive information from, or perform destructive actions, on behalf of Kibana users who edit the TSVB visualization.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free