Description
A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated user to perform a request that crashes the Kibana server process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Elastic | kibana | Versions 7.0.0 through 7.17.8 and 8.0.0 through 8.6.0 | — |
Advisories 2
- WID-SEC-2026-0180 Dell Data Protection Advisor: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 20, 2026
- WID-SEC-2023-0284 Kibana: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Feb 5, 2023