CVE-2018-3830

Publication date

2018-09-19 19:00:00

Family

elastic

State

PUBLISHED

Description

Kibana versions 5.3.0 to 6.4.1 had a cross-site scripting (XSS) vulnerability via the source field formatter that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.