CVE-2026-77811 - Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset with arbitrary web content. - 漏洞详情

漏洞编号：CVE-2026-77811

风险等级：高危

漏洞来源：CVE

CVE 编号：CVE-2026-77811

CNNVD 编号：-

厂商/产品：- / -

影响范围：-

CWE：CWE-79

发布/更新时间：2026-08-21 / 2026-08-27

漏洞描述

Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset with arbitrary web content.

漏洞描述

相关链接

相关漏洞