# CSRF issue in Kibana 6.8

**URL:** https://discuss.elastic.co/t/csrf-issue-in-kibana-6-8/240777
**Category:** Kibana
**Tags:** elastic-stack-security
**Created:** [July 11, 2020, 4:41am UTC](https://discuss.elastic.co/t/csrf-issue-in-kibana-6-8/240777 "2020-07-11T04:41:00Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![nirav.gshah](https://avatars.discourse-cdn.com/v4/letter/n/9f8e36/32.png) [@nirav.gshah](https://discuss.elastic.co/u/nirav.gshah)
#### Post date: [July 11, 2020, 4:41am UTC](https://discuss.elastic.co/t/csrf-issue-in-kibana-6-8/240777/1 "2020-07-11T04:41:01Z")

</div>

Hi Team,

We are doing penetration testing in ELK 6.8 using basic license. We have CSRF related issues. Are there any way we can close this CSRF or control CSRF.

Regards  
Nirav

---

<div class="post-metadata">

### Author: ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)
#### Post date: [July 13, 2020, 6:09am UTC](https://discuss.elastic.co/t/csrf-issue-in-kibana-6-8/240777/2 "2020-07-13T06:09:46Z")

</div>

@Larry_Gregory - can you please shed some light here?

Thanks  
Rashmi

---

<div class="post-metadata">

### Author: ![Larry\_Gregory](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/larry_gregory/32/34969_2.png) [@Larry\_Gregory](https://discuss.elastic.co/u/Larry_Gregory)
#### Post date: [July 13, 2020, 12:06pm UTC](https://discuss.elastic.co/t/csrf-issue-in-kibana-6-8/240777/3 "2020-07-13T12:06:51Z")

</div>

Hi @nirav.gshah,

Please send security vulnerability reports to [security@elastic.co.](mailto:security@elastic.co)

For more information, please consult our security page: [https://www.elastic.co/community/security](https://www.elastic.co/community/security)

---

<div class="post-metadata">

### Author: ![nirav.gshah](https://avatars.discourse-cdn.com/v4/letter/n/9f8e36/32.png) [@nirav.gshah](https://discuss.elastic.co/u/nirav.gshah)
#### Post date: [July 13, 2020, 12:21pm UTC](https://discuss.elastic.co/t/csrf-issue-in-kibana-6-8/240777/4 "2020-07-13T12:21:18Z")

</div>

Sure Thanks

---

<div class="post-metadata">

### Author: ![Larry\_Gregory](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/larry_gregory/32/34969_2.png) [@Larry\_Gregory](https://discuss.elastic.co/u/Larry_Gregory)
#### Post date: [July 13, 2020, 12:36pm UTC](https://discuss.elastic.co/t/csrf-issue-in-kibana-6-8/240777/5 "2020-07-13T12:36:56Z")

</div>