What’s Vulnerable › Vulnerabilities

CVE-2020-10743

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-06-02 · updated 2026-06-17
• Weakness: CWE-358

Description

It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in an iframe, which made it possible to intercept and manipulate requests. This flaw allows an attacker to trick a user into performing arbitrary actions in OCP's distribution of Kibana, such as clickjacking.

Affected products

• Kibana: all versions
• Red Hat OpenShift Container Platform 4.18: 3.11.286, 4.6.1

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1834550
• https://bugzilla.redhat.com/show_bug.cgi?id=1834550

Get alerted when CVE-2020-10743 or the next vulnerability affects your stack