自动数据同步 2025-11-20

Author: github-actions[bot]

data/all_vuln/CVE-2017-11481.json

@@ -1 +1 @@
-{"schema_version":"1.7.3","id":"CVE-2017-11481","published":"2017-12-08T18:29:00Z","modified":"2025-11-18T16:23:49.638037Z","related":["SUSE-SU-2021:1962-1","SUSE-SU-2021:1963-1","SUSE-SU-2021:2554-1"],"details":"Kibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL fields that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/elastic/elasticsearch","events":[{"introduced":"0"},{"last_affected":"017411929664bba1d01ee5420d4316939b7c5509"},{"last_affected":"0424099674571fac2ff26188bb6b9d2860be605a"},{"last_affected":"119515d4728223bae258aea77fae8ac40369b9b4"},{"last_affected":"1a2f2657be59b98ba20133ea3e8b66eb72c076b0"},{"last_affected":"23ffa4fdc2e2a6653171ba7c0fa96ff06bc8ca2c"},{"last_affected":"57e20f3c86c8af747761149eb7eefbf7caea4b9a"},{"last_affected":"667b4976e31f646de58794d03306ab8bfd4f743b"},{"last_affected":"781a83507f0598b36512cba088ffeefa73b4bbe6"},{"last_affected":"896afa4414e42b84408ecbca6ad66a43f65a13ae"},{"last_affected":"8bbedf5fe55fa22888e107898e5c16ca7f82c636"},{"last_affected":"8f0685b924b9159807704ec2593b26e28105da44"},{"last_affected":"b9c0df26543ceb25ca19519069d3197f126536fb"}]}],"versions":["v0.10.0","v0.11.0","v0.12.0","v0.13.0","v0.14.0","v0.15.0","v0.16.0","v0.17.0","v0.18.0","v0.19.0","v0.19.0.RC1","v0.19.0.RC2","v0.19.0.RC3","v0.20.0.RC1","v0.4.0","v0.5.0","v0.5.1","v0.6.0","v0.7.0","v0.7.1","v0.8.0","v0.9.0","v0.90.0","v0.90.0.Beta1","v0.90.0.RC1","v0.90.0.RC2","v1.0.0.Beta1","v1.0.0.Beta2","v1.0.0.RC1","v5.0.0-alpha1","v5.0.0-alpha2","v5.0.0-alpha3","v5.0.0-alpha4","v5.0.0-alpha5","v5.6.0","v5.6.1","v5.6.2","v5.6.3","v6.0.0-alpha1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11481.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/elastic/kibana","events":[{"introduced":"0"},{"last_affected":"04485d7d34cc0e94f58146577892fb2c4a6e7f56"},{"last_affected":"0766ab238177e366236f3cdf34b19b6c5ffaf837"},{"last_affected":"12d17c6d111705f0c0c29fbab66eb22eda31dcdf"},{"last_affected":"3cb25ad0b62e8b085f4fabf2af7efca03124c1b9"},{"last_affected":"815b082799cc42b0a66d52689d901525b5e6f182"},{"last_affected":"864b8719e2814b7667d5831c415a79026d78ea9f"},{"last_affected":"b7f519704ae0d25f085e3278198e2abec1d9ef6e"},{"last_affected":"d1e7b4cfb06c4d9156fb1e691853b36ff5801d57"},{"last_affected":"e5b6450423e5b179eb85810b997dd3fd0c8c7ddb"},{"last_affected":"efd2403e605c9f695a87929083421ba09f3ac54e"},{"last_affected":"f363a8fe7aeeb6a535e0bb43b3b1916f26ab3732"},{"last_affected":"f8bc449f5a6b28d0597730b1cf03fefe7e33422e"}]}],"versions":["v4.0.0","v4.0.0-beta1","v4.0.0-beta1.1","v4.0.0-beta2","v4.0.0-beta3","v4.0.0BETA1","v4.1.0","v4.2.0-beta1","v5.0.0-alpha5","v5.6.0","v6.0.0-alpha1","v6.0.0-alpha2","v6.0.0-beta1","v6.0.0-beta2","v6.0.0-rc1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11481.json"}}],"references":[{"type":"ADVISORY","url":"https://discuss.elastic.co/t/kibana-6-0-1-and-5-6-5-security-update/110571"}],"severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}
+{"schema_version":"1.7.3","id":"CVE-2017-11481","published":"2017-12-08T18:29:00Z","modified":"2025-11-19T12:16:08.585941Z","related":["SUSE-SU-2021:1962-1","SUSE-SU-2021:1963-1","SUSE-SU-2021:2554-1"],"details":"Kibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL fields that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/elastic/elasticsearch","events":[{"introduced":"0"},{"last_affected":"017411929664bba1d01ee5420d4316939b7c5509"},{"last_affected":"0424099674571fac2ff26188bb6b9d2860be605a"},{"last_affected":"119515d4728223bae258aea77fae8ac40369b9b4"},{"last_affected":"1a2f2657be59b98ba20133ea3e8b66eb72c076b0"},{"last_affected":"23ffa4fdc2e2a6653171ba7c0fa96ff06bc8ca2c"},{"last_affected":"57e20f3c86c8af747761149eb7eefbf7caea4b9a"},{"last_affected":"667b4976e31f646de58794d03306ab8bfd4f743b"},{"last_affected":"781a83507f0598b36512cba088ffeefa73b4bbe6"},{"last_affected":"896afa4414e42b84408ecbca6ad66a43f65a13ae"},{"last_affected":"8bbedf5fe55fa22888e107898e5c16ca7f82c636"},{"last_affected":"8f0685b924b9159807704ec2593b26e28105da44"},{"last_affected":"b9c0df26543ceb25ca19519069d3197f126536fb"}]}],"versions":["v0.10.0","v0.11.0","v0.12.0","v0.13.0","v0.14.0","v0.15.0","v0.16.0","v0.17.0","v0.18.0","v0.19.0","v0.19.0.RC1","v0.19.0.RC2","v0.19.0.RC3","v0.20.0.RC1","v0.4.0","v0.5.0","v0.5.1","v0.6.0","v0.7.0","v0.7.1","v0.8.0","v0.9.0","v0.90.0","v0.90.0.Beta1","v0.90.0.RC1","v0.90.0.RC2","v1.0.0.Beta1","v1.0.0.Beta2","v1.0.0.RC1","v5.0.0-alpha1","v5.0.0-alpha2","v5.0.0-alpha3","v5.0.0-alpha4","v5.0.0-alpha5","v5.6.0","v5.6.1","v5.6.2","v5.6.3","v6.0.0-alpha1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11481.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/elastic/kibana","events":[{"introduced":"0"},{"last_affected":"04485d7d34cc0e94f58146577892fb2c4a6e7f56"},{"last_affected":"0766ab238177e366236f3cdf34b19b6c5ffaf837"},{"last_affected":"12d17c6d111705f0c0c29fbab66eb22eda31dcdf"},{"last_affected":"3cb25ad0b62e8b085f4fabf2af7efca03124c1b9"},{"last_affected":"815b082799cc42b0a66d52689d901525b5e6f182"},{"last_affected":"864b8719e2814b7667d5831c415a79026d78ea9f"},{"last_affected":"b7f519704ae0d25f085e3278198e2abec1d9ef6e"},{"last_affected":"d1e7b4cfb06c4d9156fb1e691853b36ff5801d57"},{"last_affected":"e5b6450423e5b179eb85810b997dd3fd0c8c7ddb"},{"last_affected":"efd2403e605c9f695a87929083421ba09f3ac54e"},{"last_affected":"f363a8fe7aeeb6a535e0bb43b3b1916f26ab3732"},{"last_affected":"f8bc449f5a6b28d0597730b1cf03fefe7e33422e"}]}],"versions":["v4.0.0","v4.0.0-beta1","v4.0.0-beta1.1","v4.0.0-beta2","v4.0.0-beta3","v4.0.0BETA1","v4.1.0","v4.2.0-beta1","v5.0.0-alpha5","v5.6.0","v6.0.0-alpha1","v6.0.0-alpha2","v6.0.0-beta1","v6.0.0-beta2","v6.0.0-rc1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11481.json"}}],"references":[{"type":"ADVISORY","url":"https://discuss.elastic.co/t/kibana-6-0-1-and-5-6-5-security-update/110571"}],"severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}

data/all_vuln/CVE-2017-11482.json

@@ -1 +1 @@
-{"schema_version":"1.7.3","id":"CVE-2017-11482","published":"2017-12-08T18:29:00Z","modified":"2025-11-14T17:04:07.352395Z","details":"The Kibana fix for CVE-2017-8451 was found to be incomplete. With X-Pack installed, Kibana versions before 6.0.1 and 5.6.5 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/elastic/elasticsearch","events":[{"introduced":"0"},{"last_affected":"017411929664bba1d01ee5420d4316939b7c5509"},{"last_affected":"0424099674571fac2ff26188bb6b9d2860be605a"},{"last_affected":"119515d4728223bae258aea77fae8ac40369b9b4"},{"last_affected":"1a2f2657be59b98ba20133ea3e8b66eb72c076b0"},{"last_affected":"23ffa4fdc2e2a6653171ba7c0fa96ff06bc8ca2c"},{"last_affected":"57e20f3c86c8af747761149eb7eefbf7caea4b9a"},{"last_affected":"667b4976e31f646de58794d03306ab8bfd4f743b"},{"last_affected":"781a83507f0598b36512cba088ffeefa73b4bbe6"},{"last_affected":"896afa4414e42b84408ecbca6ad66a43f65a13ae"},{"last_affected":"8bbedf5fe55fa22888e107898e5c16ca7f82c636"},{"last_affected":"8f0685b924b9159807704ec2593b26e28105da44"},{"last_affected":"b9c0df26543ceb25ca19519069d3197f126536fb"}]}],"versions":["v0.10.0","v0.11.0","v0.12.0","v0.13.0","v0.14.0","v0.15.0","v0.16.0","v0.17.0","v0.18.0","v0.19.0","v0.19.0.RC1","v0.19.0.RC2","v0.19.0.RC3","v0.20.0.RC1","v0.4.0","v0.5.0","v0.5.1","v0.6.0","v0.7.0","v0.7.1","v0.8.0","v0.9.0","v0.90.0","v0.90.0.Beta1","v0.90.0.RC1","v0.90.0.RC2","v1.0.0.Beta1","v1.0.0.Beta2","v1.0.0.RC1","v5.0.0-alpha1","v5.0.0-alpha2","v5.0.0-alpha3","v5.0.0-alpha4","v5.0.0-alpha5","v5.6.0","v5.6.1","v5.6.2","v5.6.3","v6.0.0-alpha1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11482.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/elastic/kibana","events":[{"introduced":"0"},{"last_affected":"04485d7d34cc0e94f58146577892fb2c4a6e7f56"},{"last_affected":"0766ab238177e366236f3cdf34b19b6c5ffaf837"},{"last_affected":"12d17c6d111705f0c0c29fbab66eb22eda31dcdf"},{"last_affected":"3cb25ad0b62e8b085f4fabf2af7efca03124c1b9"},{"last_affected":"815b082799cc42b0a66d52689d901525b5e6f182"},{"last_affected":"864b8719e2814b7667d5831c415a79026d78ea9f"},{"last_affected":"b7f519704ae0d25f085e3278198e2abec1d9ef6e"},{"last_affected":"d1e7b4cfb06c4d9156fb1e691853b36ff5801d57"},{"last_affected":"e5b6450423e5b179eb85810b997dd3fd0c8c7ddb"},{"last_affected":"efd2403e605c9f695a87929083421ba09f3ac54e"},{"last_affected":"f363a8fe7aeeb6a535e0bb43b3b1916f26ab3732"},{"last_affected":"f8bc449f5a6b28d0597730b1cf03fefe7e33422e"}]}],"versions":["v4.0.0","v4.0.0-beta1","v4.0.0-beta1.1","v4.0.0-beta2","v4.0.0-beta3","v4.0.0BETA1","v4.1.0","v4.2.0-beta1","v5.0.0-alpha5","v5.6.0","v6.0.0-alpha1","v6.0.0-alpha2","v6.0.0-beta1","v6.0.0-beta2","v6.0.0-rc1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11482.json"}}],"references":[{"type":"ADVISORY","url":"https://discuss.elastic.co/t/kibana-6-0-1-and-5-6-5-security-update/110571"}],"severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}
+{"schema_version":"1.7.3","id":"CVE-2017-11482","published":"2017-12-08T18:29:00Z","modified":"2025-11-19T12:26:14.408242Z","details":"The Kibana fix for CVE-2017-8451 was found to be incomplete. With X-Pack installed, Kibana versions before 6.0.1 and 5.6.5 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/elastic/elasticsearch","events":[{"introduced":"0"},{"last_affected":"017411929664bba1d01ee5420d4316939b7c5509"},{"last_affected":"0424099674571fac2ff26188bb6b9d2860be605a"},{"last_affected":"119515d4728223bae258aea77fae8ac40369b9b4"},{"last_affected":"1a2f2657be59b98ba20133ea3e8b66eb72c076b0"},{"last_affected":"23ffa4fdc2e2a6653171ba7c0fa96ff06bc8ca2c"},{"last_affected":"57e20f3c86c8af747761149eb7eefbf7caea4b9a"},{"last_affected":"667b4976e31f646de58794d03306ab8bfd4f743b"},{"last_affected":"781a83507f0598b36512cba088ffeefa73b4bbe6"},{"last_affected":"896afa4414e42b84408ecbca6ad66a43f65a13ae"},{"last_affected":"8bbedf5fe55fa22888e107898e5c16ca7f82c636"},{"last_affected":"8f0685b924b9159807704ec2593b26e28105da44"},{"last_affected":"b9c0df26543ceb25ca19519069d3197f126536fb"}]}],"versions":["v0.10.0","v0.11.0","v0.12.0","v0.13.0","v0.14.0","v0.15.0","v0.16.0","v0.17.0","v0.18.0","v0.19.0","v0.19.0.RC1","v0.19.0.RC2","v0.19.0.RC3","v0.20.0.RC1","v0.4.0","v0.5.0","v0.5.1","v0.6.0","v0.7.0","v0.7.1","v0.8.0","v0.9.0","v0.90.0","v0.90.0.Beta1","v0.90.0.RC1","v0.90.0.RC2","v1.0.0.Beta1","v1.0.0.Beta2","v1.0.0.RC1","v5.0.0-alpha1","v5.0.0-alpha2","v5.0.0-alpha3","v5.0.0-alpha4","v5.0.0-alpha5","v5.6.0","v5.6.1","v5.6.2","v5.6.3","v6.0.0-alpha1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11482.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/elastic/kibana","events":[{"introduced":"0"},{"last_affected":"04485d7d34cc0e94f58146577892fb2c4a6e7f56"},{"last_affected":"0766ab238177e366236f3cdf34b19b6c5ffaf837"},{"last_affected":"12d17c6d111705f0c0c29fbab66eb22eda31dcdf"},{"last_affected":"3cb25ad0b62e8b085f4fabf2af7efca03124c1b9"},{"last_affected":"815b082799cc42b0a66d52689d901525b5e6f182"},{"last_affected":"864b8719e2814b7667d5831c415a79026d78ea9f"},{"last_affected":"b7f519704ae0d25f085e3278198e2abec1d9ef6e"},{"last_affected":"d1e7b4cfb06c4d9156fb1e691853b36ff5801d57"},{"last_affected":"e5b6450423e5b179eb85810b997dd3fd0c8c7ddb"},{"last_affected":"efd2403e605c9f695a87929083421ba09f3ac54e"},{"last_affected":"f363a8fe7aeeb6a535e0bb43b3b1916f26ab3732"},{"last_affected":"f8bc449f5a6b28d0597730b1cf03fefe7e33422e"}]}],"versions":["v4.0.0","v4.0.0-beta1","v4.0.0-beta1.1","v4.0.0-beta2","v4.0.0-beta3","v4.0.0BETA1","v4.1.0","v4.2.0-beta1","v5.0.0-alpha5","v5.6.0","v6.0.0-alpha1","v6.0.0-alpha2","v6.0.0-beta1","v6.0.0-beta2","v6.0.0-rc1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11482.json"}}],"references":[{"type":"ADVISORY","url":"https://discuss.elastic.co/t/kibana-6-0-1-and-5-6-5-security-update/110571"}],"severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}