Description
Prototype Pollution in Kibana can lead to code injection via unrestricted file upload combined with path traversal.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Elastic | Kibana | 8.16.1 – < 8.17.1 | 8.17.1 |
Advisories 1
- WID-SEC-2025-0743 Kibana: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 8, 2025