Description
An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted request to /api/log_entries/summary. This can be carried out by users with read access to the Observability-Logs feature in Kibana.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Elastic | Kibana | 7.17.0, 8.0.0 – < 7.17.23, 8.14.2 | 7.17.23, 8.14.2 |
Advisories 1
- WID-SEC-2025-0134 Kibana: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Jan 20, 2025