All vulnerabilities

Servers and applications

CVE-2023-31422

An issue was discovered by Elastic whereby sensitive information is recorded in Kibana logs in the event of an error. The issue impacts only Kibana version 8.10.0 when logging in the JSON layout or when the pattern layout is configured to log the %meta pattern. Elastic has released Kibana 8.10.1 which resolves this issue. The error object recorded in the log contains request information, which…

Severity
High 7.5
Published
26 Oct 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
KibanaServers and applications · cpe:a:elastic:kibana
  • Version 8.10.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-31422
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-31422