This vulnerability in Elastic Kibana arises from improper input sanitization during web page generation, allowing stored cross-site scripting (XSS) attacks. Specifically, a user with write permissions to an Elasticsearch index can persist malicious HTML markup. When this markup is rendered in Kibana views by other users, it is not sufficiently sanitized, enabling unauthorized manipulation of the user interface and the potential for outbound network requests originating from the victim's browser session. The CVSS 3.1 base score is 4.1, indicating medium severity, with attack vector network, low attack complexity, requiring privileges and user interaction, and impact limited to integrity. No official fix or patch is currently documented, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation allows an attacker with write access to an Elasticsearch index to inject stored HTML content that can manipulate the Kibana UI seen by other users and cause their browsers to issue outbound network requests. This compromises the integrity of the user interface and could facilitate further attacks or data exfiltration via the victim's browser context. Confidentiality and availability impacts are not indicated. There are no known exploits in the wild at this time.

No official patch or remediation guidance is currently available from the vendor. Since this is not a cloud service, users should monitor Elastic's advisories for updates. Until a fix is released, limit write access to Elasticsearch indices to trusted users only to reduce exposure. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.