CVE-2017-11479
Kibana versions prior to 5.6.1 had a cross-site scripting (XSS) vulnerability in Timelion that could allow an attacker to obtain sensitive information from or perform destructiv…
Published: 2017-09-28 · CVSS: Unscored
Kibana versions prior to 5.6.1 had a cross-site scripting (XSS) vulnerability in Timelion that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7