UpHeron
All vulnerabilities

Servers and applications

CVE-2022-23711

A vulnerability in Kibana could expose sensitive information related to Elastic Stack monitoring in the Kibana page source. Elastic Stack monitoring features provide a way to keep a pulse on the health and performance of your Elasticsearch cluster. Authentication with a vulnerable Kibana instance is not required to view the exposed information. The Elastic Stack monitoring exposure only impacts…

Severity
Medium 5.3
Published
21 Apr 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
7.17.3, 8.1.3
Sources
NVD

Affected software

SoftwareAffected versions
KibanaServers and applications · cpe:a:elastic:kibana
  • From 7.2.1 before 7.17.3
  • From 8.0.0 before 8.1.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-23711
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-23711