Threats tagged 'bit-kibana-2025-68385'

1 threat

Threats tagged 'bit-kibana-2025-68385'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.2	EPSS 0.3%	CVE-2025-68385Kibana · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') High7.2EPSS 0.3%2025-12-18CVE Database V5CVE-2025-68385 Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an authenticated user to embed a malicious script in content that will be served to web browsers causing cross-site scripting (XSS) (CAPEC-63) via a method in Vega bypassing a previous Vega XSS mitigation. EPSS 0.3%Vulnerability Elastic #cwe-79 #bit-kibana-2025-68385 #bitnami	CVE Database V5	2025-12-18

Showing 1–1 of 1 result