CVE-2018-3823 json
X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability.
published 2018-09-19 8 y ago modified 2026-06-17 4 mo ago also EUVD-2018-15611
- cvss
- 5.4
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.6%
- EPSS 0.6% chance of exploitation in 30 days, percentile 51%
- public exploits
- 0
- none known
Summary
X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability. Users with manage_ml permissions could create jobs containing malicious data as part of their configuration that could allow the attacker to obtain sensitive information from or perform destructive actions on behalf of other ML users viewing the results of the jobs.
Patch / fix
- elastic elasticsearch_x-pack 5.6.9, 6.2.4
- elastic kibana_x-pack 5.6.9, 6.2.4
- elastic logstash_x-pack 5.6.9, 6.2.4
Exploit prediction
0.65% chance of exploitation in the next 30 days, higher than 51% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 5.4 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
| NVD | 2.0 | 3.5 | AV:N/AC:M/Au:S/C:N/I:P/A:N |
Affected products
- Elastic Elasticsearch X-Pack Machine Learning
Classification
- Weakness
-
- CWE-79 Improper Neutralization of Input During Web Page Generation
References
-
discuss.elastic.co
/t/elastic-stack-6-2-4-and-5-6-9-security-update/128422
vendor-advisory
-
elastic.co
/community/security
vendor-advisory
Sources
- CVE List CVE-2018-3823
- NVD CVE-2018-3823
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.