Description
An issue was discovered in Kibana where a user with Viewer role could cause a Kibana instance to crash by sending a large number of maliciously crafted requests to a specific endpoint.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Elastic | Kibana | 7.x – < 7.17.23, 8.x – < 8.14.0 | 7.17.23 |
Advisories 1
- WID-SEC-2024-1731 Kibana: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Jul 30, 2024