CVE-2022-23713: Elastic Kibana

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

A cross-site-scripting (XSS) vulnerability was discovered in the Vega Charts Kibana integration which could allow arbitrary JavaScript to be executed in a victim’s browser.

Affected products

• Elastic Kibana: from 7.0.0, before 7.17.5 (fixed in 7.17.5); from 8.0.0, up to and including 8.2.3

Published 2022-07-06. Last modified 2026-06-17.