https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 02 Nov 2026 10:15:11 +0000 https://db.gcve.eu/vuln/bit-elk-2026-72658 <p><strong>Affected:</strong> Bitnami: elk</p> <p>Cross-Site Request Forgery (CWE-352) in Kibana can lead to privilege escalation via Cross Site Request Forgery (CAPEC-62). A user who is permitted to create visualizations can save a specially crafted Vega visualization that, when it is opened by another user, causes authenticated requests to be issued to Kibana in the context of the viewing user&#39;s session.</p> <p><strong>Affected:</strong> Bitnami: elk</p> <p>Cross-Site Request Forgery (CWE-352) in Kibana can lead to privilege escalation via Cross Site Request Forgery (CAPEC-62). A user who is permitted to create visualizations can save a specially crafted Vega visualization that, when it is opened by another user, causes authenticated requests to be issued to Kibana in the context of the viewing user&#39;s session.</p> https://db.gcve.eu/vuln/bit-elk-2026-72658 https://db.gcve.eu/vuln/certfr-2026-avi-1020 certfr-2026-avi-1020 https://db.gcve.eu/vuln/certfr-2026-avi-1020 https://db.gcve.eu/vuln/fkie_cve-2026-72658 <p>Cross-Site Request Forgery (CWE-352) in Kibana can lead to privilege escalation via Cross Site Request Forgery (CAPEC-62). A user who is permitted to create visualizations can save a specially crafted Vega visualization that, when it is opened by another user, causes authenticated requests to be issued to Kibana in the context of the viewing user&#39;s session.</p> <p>Cross-Site Request Forgery (CWE-352) in Kibana can lead to privilege escalation via Cross Site Request Forgery (CAPEC-62). A user who is permitted to create visualizations can save a specially crafted Vega visualization that, when it is opened by another user, causes authenticated requests to be issued to Kibana in the context of the viewing user&#39;s session.</p> https://db.gcve.eu/vuln/fkie_cve-2026-72658 https://db.gcve.eu/vuln/ghsa-55cc-rgfq-623v <p>Cross-Site Request Forgery (CWE-352) in Kibana can lead to privilege escalation via Cross Site Request Forgery (CAPEC-62). A user who is permitted to create visualizations can save a specially crafted Vega visualization that, when it is opened by another user, causes authenticated requests to be issued to Kibana in the context of the viewing user&#39;s session.</p> <p>Cross-Site Request Forgery (CWE-352) in Kibana can lead to privilege escalation via Cross Site Request Forgery (CAPEC-62). A user who is permitted to create visualizations can save a specially crafted Vega visualization that, when it is opened by another user, causes authenticated requests to be issued to Kibana in the context of the viewing user&#39;s session.</p> https://db.gcve.eu/vuln/ghsa-55cc-rgfq-623v