CVE-2015-4093
Cross-site scripting (XSS) vulnerability in Elasticsearch Kibana 4.x before 4.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Date published : 2015-06-15
http://www.securityfocus.com/bid/75107
http://www.securityfocus.com/archive/1/535726/100/0/threaded