{"id":"CVE-2024-23442","summary":"Kibana open redirect issue","details":"An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL.","aliases":["BIT-elk-2024-23442","BIT-kibana-2024-23442"],"modified":"2026-08-12T03:51:35.267228599Z","published":"2024-06-14T14:26:53.169Z","database_specific":{"cna_assigner":"elastic","cwe_ids":["CWE-601"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/23xxx/CVE-2024-23442.json","unresolved_ranges":[{"extracted_events":[{"introduced":"8.11.1"},{"last_affected":"8.13.4"},{"introduced":"7.17.21"},{"last_affected":"7.17.21"}],"source":"AFFECTED_FIELD"}]},"references":[{"type":"WEB","url":"https://discuss.elastic.co/t/kibana-8-14-0-7-17-22-security-update/361502"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/23xxx/CVE-2024-23442.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23442"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/elastic/elasticsearch","events":[{"introduced":"0"},{"fixed":"38e9ca2e81304a821c50862dafab089ca863944b"},{"introduced":"1b6a7ece17463df5ff54a3e1302d825889aa1161"},{"fixed":"8d96bbe3bf5fed931f3119733895458eab75dca9"}],"database_specific":{"cpe":"cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"7.17.22"},{"introduced":"8.0.0"},{"fixed":"8.14.0"}],"source":"CPE_RANGE"}}],"versions":["v7.17.21","v7.17.20","v7.17.19","v7.17.18","v7.17.17","v7.17.16","v7.17.15","v7.17.14","v7.17.13","v7.17.12","v7.17.11","v7.17.10","v7.17.9","v7.17.8","v7.17.7","v7.17.6","v7.17.5","v7.17.4","v7.17.3","v7.17.2","v7.17.1","v7.17.0","v7.16.1","v7.16.0","v8.0.0-alpha2","v8.0.0-alpha1","v7.0.0-alpha2","v7.0.0-alpha1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-23442.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/elastic/kibana","events":[{"introduced":"0"},{"fixed":"43696930d77d3bb567e445624874eab9cf363872"},{"introduced":"57ca5e139a33dd2eed927ce98d8231a1f217cd15"},{"fixed":"3bc2979d1d65982aee7d13ebd65434c3470dc808"}],"database_specific":{"source":"CPE_RANGE","cpe":"cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"7.17.22"},{"introduced":"8.0.0"},{"fixed":"8.14.0"}]}}],"versions":["v7.17.21","deploy@1713161715","v7.17.20","deploy@1712566963","deploy@1711952105","deploy@1711370131","v7.17.19","deploy@1710741924","deploy@1710146776","deploy@1710137117","deploy@1709533819","deploy@1709532332","deploy@1708927574","deploy@1708322739","deploy@1707717945","deploy@1707113127","v7.17.18","deploy@1706508321","v7.17.17","deploy@1705903520","deploy@1705306975","deploy@1705298718","deploy@1704693922","deploy@1704089101","deploy@1703484304","deploy@1702903357","deploy@1702879551","deploy@1702367069","deploy@1702284899","v7.17.16","deploy@1701687168","deploy@1701160888","deploy@1700491293","v7.17.15","deploy@1699865290","deploy@1699260155","deploy@1698657637","deploy@1698046713","deploy@1697564183","deploy@1697232175","test-depl-20231025084603","test-depl-20231013154558","deploy@1697028216","deploy@1696873111","deploy@1696618725","v7.17.14","deploy@1696508231","deploy@1696415195","deploy@1696328885","deploy@1695286747","deploy@1694683198","deploy@1694506029","deploy@1694162455","deploy@1694087994","deploy@1693866333","deploy@1693860790","deploy@1693853982","deploy@1693609987","deploy@1693594780","v7.17.13","v7.17.12","v7.17.11","v7.17.10","v7.17.9","v7.17.8","v7.17.7","v7.17.6","v7.17.5","v7.17.4","v7.17.3","v7.17.2","v7.17.1","v7.17.0","v7.16.1","v7.16.0","v8.0.0-alpha2","v8.0.0-alpha1","v7.0.0-alpha2","v7.0.0-alpha1","7.0-known-good","v6.0.0-alpha2","v6.0.0-alpha1","v5.0.0-alpha5","v4.2.0-beta1","v4.0.0-beta3","v4.0.0-beta2","v4.0.0-beta1.1","v4.0.0-beta1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-23442.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}