CVE-2018-20698

The floragunn Search Guard plugin before 6.x-16 for Kibana allows URL injection for login redirects on the login page when basePath is set.

• CWE-601

• https://docs.search-guard.com/latest/changelog-kibana-6.x-16Patch, Vendor Advisory
• https://github.com/floragunncom/search-guard-kibana-plugin/pull/140Third Party Advisory
• https://docs.search-guard.com/latest/changelog-kibana-6.x-16Patch, Vendor Advisory
• https://github.com/floragunncom/search-guard-kibana-plugin/pull/140Third Party Advisory

Published

Apr 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-20683commands/rsync in Gitolite before 3.6.11, if .gitolite.rc en…
• CVE-2018-20684In WinSCP before 5.14 beta, due to missing validation, the s…
• CVE-2018-20685In OpenSSH 7.9, scp.c in the scp client allows remote SSH se…5.3
• CVE-2018-20686Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-20687An XML external entity (XXE) vulnerability in CommandCenterW…9.8
• CVE-2018-2069Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-20699Docker Engine before 18.09 allows attackers to cause a denia…
• CVE-2018-2070Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-20703CubeCart 6.2.2 has Reflected XSS via a /{ADMIN-FILE}/ query …
• CVE-2018-2071Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-20710Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-20712A heap-based buffer over-read exists in the function d_expre…