Security Advisory
CVE-2016-1000220
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Kibana before 4.5.4 and 4.1.11 are vulnerable to an XSS attack that would allow an attacker to execute arbitrary JavaScript in users browsers.