Related Vulnerabilities: CVE-2020-7017  

In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw. An attacker who is able to edit or create a region map visualization could obtain sensitive information or perform destructive actions on behalf of Kibana users who view the region map visualization.

Severity High

Remote Yes

Type Content spoofing

Description

In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw. An attacker who is able to edit or create a region map visualization could obtain sensitive information or perform destructive actions on behalf of Kibana users who view the region map visualization.

AVG-1210 kibana 7.7.0-1 High Vulnerable

https://discuss.elastic.co/t/elastic-stack-6-8-11-and-7-8-1-security-update/242786