Beveiligingsadvies

CVE-2020-7011

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-06-03 17:55:43
Laatst bijgewerkt 2024-08-04 09:18:02
Toegewezen door elastic
CVSS-score geen score
Status PUBLISHED

Beschrijving

Elastic App Search versions before 7.7.0 contain a cross site scripting (XSS) flaw when displaying document URLs in the Reference UI. If the Reference UI injects a URL into a result, that URL will be rendered by the web browser. If an attacker is able to control the contents of such a field, they could execute arbitrary JavaScript in the victim�s web browser.

← Alle CVE's bekijken Bekijk op cve.org ↗