Vulnerability library
Security checkJuly 11, 2023

Kibana Sensitive Data Disclosure

Understand the exposure, see the recommended fix, and check whether your own website has related weaknesses.

Medium severitynpmkibana

Check your website

Find this and other vulnerabilities with a free scan.

Your scan runs on your computer. No account required.

Description

It was discovered that Kibana’s JIRA connector & IBM Resilient connector could be used to return HTTP response data on internal hosts, which may be intentionally hidden from public view.

Recommendation

Update the kibana package to the latest compatible version. Followings are version details:

  • Affected version(s): >= 7.8.0, <= 7.15.1
  • Patched version(s): 7.15.2

References

Could your website be exposed too?

SmartScanner can check your website for Kibana Sensitive Data Disclosure and gives you actionable findings to investigate.

Start a free scan

Related Issues

You might also like:

Exploiting Server Version Disclosure

10 Secure Coding Best Practices to Follow in Every Project

Update Cheat Sheet for Developers

See something that needs correcting? Let us knowUpdated July 11, 2023