# Kibana 8.14.0/7.17.22 Security Update (ESA-2024-10)

**URL:** <https://discuss.elastic.co/t/kibana-8-14-0-7-17-22-security-update-esa-2024-10/361502>\
**Category:** Security Announcements\
**Created:** [June 14, 2024, 2:09pm UTC](https://discuss.elastic.co/t/kibana-8-14-0-7-17-22-security-update-esa-2024-10/361502 "2024-06-14T14:09:17Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![rodrigo\_silva](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rodrigo_silva/32/120546_2.png) [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)\
**Post date:** [June 14, 2024, 2:09pm UTC](https://discuss.elastic.co/t/kibana-8-14-0-7-17-22-security-update-esa-2024-10/361502/1 "2024-06-14T14:09:17Z")

</div>

**Kibana open redirect issue (ESA-2024-10).**

An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL.

**Affected Versions:**  
Kibana Versions before 7.17.22 and before 8.14.0.

**Solutions and Mitigations:**  
The issue is resolved in versions 7.17.22 and 8.14.0.

**Severity:** CVSSv3: 6.1(Medium) - AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

**CVE ID:** CVE-2024-23442