Does CVE-2023-31414 and CVE-2023-31415 affects the users using ES 8.5.2 with Kibana 8.5.2 in self managed docker container? Could you please elobarate how it can affect us like where the attacker can run the javascript with more details?

Kibana arbitrary code execution (ESA-2023-07) Does this affect Elasticsearch 8.5.2 with Kibana 8.5.2

system (system) Closed October 19, 2023, 7:38am 2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Kibana 8.7.1 Security Updates (ESA-2023-07, ESA-2023-08) Security Announcements docker	0	12802	May 2, 2023
This version of Kibana requires at least Elasticsearch 1.4.0.Beta1 but using 1.4.1 Elasticsearch	10	507	July 6, 2017
Elastic Stack 5.5.1 and Kibana 4.6.5 security update Security Announcements	1	9523	November 4, 2022
ELK behind ELB Kibana	4	2506	July 6, 2017
Cannot connect elasticsearch cluster with security Kibana	13	3395	June 20, 2018