Kibana Cross-Site Scripting (ESA-2023-05) and Kibana arbitrary code execution (ESA-2023-07)

What is the time schedule to handle those two security alerts ?

I’m still using SG classic, will it be updated too or do I need to switch in emergency ?

A release of Search Guard classic for ES 7.17.10 is now available. Unfortunately, we are having some issues with the download page at the moment, but you can directly download these from the Search Guard Artifactory:

https://maven.search-guard.com/search-guard-suite-release/com/floragunn/search-guard-suite-plugin/7.17.10-53.7.0/
https://maven.search-guard.com/search-guard-kibana-plugin-release/com/floragunn/search-guard-kibana-plugin/7.17.10-53.0.0/

1 Like

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.