CVE-2025-68385: Cross-site Scripting in Kibana, 7.2 rating❗️
A vulnerability in the Vega renderer could allow an authenticated attacker to perform XSS injection.
Search at Netlas.io:
👉 Link: https://nt.ls/XGTPX
👉 Dork: http.unknown_headers.key:"kbn_name"
Vendor's advisory: https://discuss.elastic.co/t/kibana-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-34/384182
Post #525
818
- 👾 5