# Kibana arbitrary code execution (ESA-2023-07) Does this affect Elasticsearch 8.5.2 with Kibana 8.5.2

**URL:** <https://discuss.elastic.co/t/kibana-arbitrary-code-execution-esa-2023-07-does-this-affect-elasticsearch-8-5-2-with-kibana-8-5-2/343508>\
**Category:** Kibana\
**Tags:** docker\
**Created:** [September 21, 2023, 7:38am UTC](https://discuss.elastic.co/t/kibana-arbitrary-code-execution-esa-2023-07-does-this-affect-elasticsearch-8-5-2-with-kibana-8-5-2/343508 "2023-09-21T07:38:32Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Chel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chel/32/49777_2.png) [@Chel](https://discuss.elastic.co/u/Chel)\
**Post date:** [September 21, 2023, 7:38am UTC](https://discuss.elastic.co/t/kibana-arbitrary-code-execution-esa-2023-07-does-this-affect-elasticsearch-8-5-2-with-kibana-8-5-2/343508/1 "2023-09-21T07:38:32Z")

</div>

Does CVE-2023-31414 and CVE-2023-31415 affects the users using ES 8.5.2 with Kibana 8.5.2 in self managed docker container? Could you please elobarate how it can affect us like where the attacker can run the javascript with more details?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 19, 2023, 7:38am UTC](https://discuss.elastic.co/t/kibana-arbitrary-code-execution-esa-2023-07-does-this-affect-elasticsearch-8-5-2-with-kibana-8-5-2/343508/2 "2023-10-19T07:38:59Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.