CVE-2018-3830 — Vulnetix

Try Vulnetix Request Demo

CVE-2018-3830 PUBLISHED CVSS 6.099999904632568 MEDIUM

Kibana versions 5.3.0 to 6.4.1 had a cross-site scripting (XSS) vulnerability via the source field formatter that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.

EPSS 0.71% · 72.2th percentile

Risk Scores

CVSS v3.1

6.099999904632568

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS Score

0.71%

72.2th percentile

Affected Products

Vendor	Product	Versions
redhat	openshift_container_platform	3.11
elastic	kibana	5.3.0
Elastic	Kibana	after 5.3.0, before 5.6.12 and 6.4.1

Timeline

Sep 19, 2018 CVE Published
Apr 14, 2021 EPSS Score
Jun 22, 2021 EPSS Score
Aug 23, 2021 EPSS Score
Dec 25, 2021 EPSS Score
Feb 25, 2022 EPSS Score
Apr 28, 2022 EPSS Score
May 13, 2022 CVE Updated
Jun 29, 2022 EPSS Score
Aug 31, 2022 EPSS Score
Nov 1, 2022 EPSS Score
Mar 5, 2023 EPSS Score

References

https://discuss.elastic.co/t/elastic-stack-6-4-1-and-5-6-12-security-update/149035 url
RHSA-2018:3537 vendor-advisory
https://www.elastic.co/community/security url
https://nvd.nist.gov/vuln/detail/CVE-2018-3830 advisory

Open in Interactive Console →