CVE-2024-23442: Elastic Kibana

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL.

Affected products

• Elastic Kibana: before 7.17.22 (fixed in 7.17.22); from 8.0.0, before 8.14.0 (fixed in 8.14.0)

Published 2024-06-14. Last modified 2026-06-17.