# Kibana 7.17.9 and 8.6.2 Security Update

**URL:** https://discuss.elastic.co/t/kibana-7-17-9-and-8-6-2-security-update/325782
**Category:** Security Announcements
**Created:** [February 16, 2023, 10:56pm UTC](https://discuss.elastic.co/t/kibana-7-17-9-and-8-6-2-security-update/325782 "2023-02-16T22:56:41Z")
**Posts on this page:** 1
**Showing post:** 1

<div class="post-metadata">

### Author: ![Levine](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/levine/32/94697_2.png) [@Levine](https://discuss.elastic.co/u/Levine)
#### Post date: [February 16, 2023, 10:56pm UTC](https://discuss.elastic.co/t/kibana-7-17-9-and-8-6-2-security-update/325782/1 "2023-02-16T22:56:41Z")

</div>

## Kibana open redirect issue (ESA-2023-03)

An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL.

### Affected Versions:

Kibana Versions 7.0.0 through 7.17.8 and 8.0.0 through 8.6.1

### Solutions and Mitigations:

The issue is resolved in versions 7.17.9 and 8.6.2

**CVSSv3:** 6.1(Medium) - AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

**CVE ID:** CVE-2022-38779

---

_[View the full topic](https://discuss.elastic.co/t/kibana-7-17-9-and-8-6-2-security-update/325782)._