CVE-2018-3819

MEDIUM · CVSS 6.1 EPSS 0.85%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-03-30 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2018-3819

Severity

MEDIUM

CVSS

6.1

EPSS

0.85%

Original NVD Description

The fix in Kibana for ESA-2017-23 was incomplete. With X-Pack security enabled, Kibana versions before 6.1.3 and 5.6.7 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website.