description: A cross-site-scripting (XSS) vulnerability was discovered in the Vega Charts Kibana integration which could allow arbitrary JavaScript to be executed in a victim’s browser.
problem types: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
affected:
{
product: kibana
vendor: Elastic
versions:
status: affected, version: Versions 7.0.0 through 7.17.4 and 8.0.0 through 8.2.3
}