vulnwire
5.4med

CVE-2018-3823

X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability.

Published 8 y ago · modified 4 mo ago · JSON

CVSS
5.4
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
0.6%
percentile 51%
Public exploits
0
none known

X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability. Users with manage_ml permissions could create jobs containing malicious data as part of their configuration that could allow the attacker to obtain sensitive information from or perform destructive actions on behalf of other ML users viewing the results of the jobs.

Exploit prediction (EPSS)

0.65% probability of exploitation in the next 30 days, higher than 51% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.15.4CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
NVD2.03.5AV:N/AC:M/Au:S/C:N/I:P/A:N

Affected products

  • Elastic Elasticsearch X-Pack Machine Learning

Classification

Weakness
  • CWE-79 Improper Neutralization of Input During Web Page Generation

References

  • discuss.elastic.co /t/elastic-stack-6-2-4-and-5-6-9-security-update/128422 · x_refsource_CONFIRM, x_transferred
  • elastic.co /community/security · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.