# Kibana Cross-Site Scripting (ESA-2023-05) and Kibana arbitrary code execution (ESA-2023-07)

**URL:** <https://forum.search-guard.com/t/kibana-cross-site-scripting-esa-2023-05-and-kibana-arbitrary-code-execution-esa-2023-07/2436>\
**Category:** Search Guard\
**Created:** [May 5, 2023, 8:34am UTC](https://forum.search-guard.com/t/kibana-cross-site-scripting-esa-2023-05-and-kibana-arbitrary-code-execution-esa-2023-07/2436 "2023-05-05T08:34:50Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![fbacchella](https://avatars.discourse-cdn.com/v4/letter/f/f14d63/32.png) [@fbacchella](https://forum.search-guard.com/u/fbacchella)\
**Post date:** [May 5, 2023, 8:34am UTC](https://forum.search-guard.com/t/kibana-cross-site-scripting-esa-2023-05-and-kibana-arbitrary-code-execution-esa-2023-07/2436/1 "2023-05-05T08:34:50Z")

</div>

What is the time schedule to handle those two security alerts ?

I’m still using SG classic, will it be updated too or do I need to switch in emergency ?

---

<div class="post-metadata">

**Author:** ![nils](https://avatars.discourse-cdn.com/v4/letter/n/d6d6ee/32.png) [@nils](https://forum.search-guard.com/u/nils)\
**Post date:** [May 9, 2023, 8:24am UTC](https://forum.search-guard.com/t/kibana-cross-site-scripting-esa-2023-05-and-kibana-arbitrary-code-execution-esa-2023-07/2436/2 "2023-05-09T08:24:06Z")

</div>

A release of Search Guard classic for ES 7.17.10 is now available. Unfortunately, we are having some issues with the download page at the moment, but you can directly download these from the Search Guard Artifactory:

[https://maven.search-guard.com/search-guard-suite-release/com/floragunn/search-guard-suite-plugin/7.17.10-53.7.0/](https://maven.search-guard.com/search-guard-suite-release/com/floragunn/search-guard-suite-plugin/7.17.10-53.7.0/)  
[https://maven.search-guard.com/search-guard-kibana-plugin-release/com/floragunn/search-guard-kibana-plugin/7.17.10-53.0.0/](https://maven.search-guard.com/search-guard-kibana-plugin-release/com/floragunn/search-guard-kibana-plugin/7.17.10-53.0.0/)

---

<div class="post-metadata">

**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/system/32/1870_2.png) [@system](https://forum.search-guard.com/u/system)\
**Post date:** [May 30, 2023, 8:24am UTC](https://forum.search-guard.com/t/kibana-cross-site-scripting-esa-2023-05-and-kibana-arbitrary-code-execution-esa-2023-07/2436/3 "2023-05-30T08:24:32Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.