cvedb.io
CVE-2022-23707
MEDIUM · CVSS 5.4
EPSS exploitation probability: 0%
Published 2022-02-11T18:15:11.797 · Last modified 2026-06-17T04:30:40.577

Summary

An XSS vulnerability was found in Kibana index patterns. Using this vulnerability, an authenticated user with permissions to create index patterns can inject malicious javascript into the index pattern which could execute against other users

Affected products

elastic — kibana

Does this affect you?

Add your gear to cvedb and we'll alert you only when elastic ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.