{"id":"CVE-2022-23710","details":"A cross-site-scripting (XSS) vulnerability was discovered in the Data Preview Pane (previously known as Index Pattern Preview Pane) which could allow arbitrary JavaScript to be executed in a victim’s browser.","modified":"2026-08-12T03:51:42.910139360Z","published":"2022-03-03T21:51:43Z","database_specific":{"cna_assigner":"elastic","cwe_ids":["CWE-79"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23710.json"},"references":[{"type":"WEB","url":"https://discuss.elastic.co/t/elastic-stack-7-17-1-security-update/298447"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23710.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23710"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20220325-0009/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/elastic/elasticsearch","events":[{"introduced":"79d65f6e357953a5b3cbcc5e2c7c21073d89aa29"},{"last_affected":"bee86328705acaa9a6daede7140defd4d9ec56bd"},{"introduced":"1b6a7ece17463df5ff54a3e1302d825889aa1161"},{"last_affected":"1b6a7ece17463df5ff54a3e1302d825889aa1161"}],"database_specific":{"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*","cpe:2.3:a:elastic:kibana:8.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.15.0"},{"last_affected":"7.17.0"},{"introduced":"8.0.0"},{"last_affected":"8.0.0"}]}}],"versions":["8.0.0","v8.0.0-rc2","v8.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23710.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/elastic/kibana","events":[{"introduced":"add5d2c5ebeba1d8bcf6a79f8863cd78760e1b3e"},{"last_affected":"60a9838d21b6420bbdb5a4d07099111b74c68ceb"},{"introduced":"57ca5e139a33dd2eed927ce98d8231a1f217cd15"},{"last_affected":"57ca5e139a33dd2eed927ce98d8231a1f217cd15"}],"database_specific":{"extracted_events":[{"introduced":"7.15.0"},{"last_affected":"7.17.0"},{"introduced":"8.0.0"},{"last_affected":"8.0.0"}],"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*","cpe:2.3:a:elastic:kibana:8.0.0:*:*:*:*:*:*:*"]}}],"versions":["8.0.0","v8.0.0-rc2","v8.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23710.json"}}],"schema_version":"1.9.0"}