Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-52974 EUVD-2025-10273GHSA-95rc-q9jr-6jhg

An issue has been identified where a specially crafted request sent to an Observability API could cause the kibana server to crash. A succe…

Published Apr 8, 2025 · Updated Apr 8, 2025 · Assigned by elastic

Vendor: Elastic Product: Kibana

Description

An issue has been identified where a specially crafted request sent to an Observability API could cause the kibana server to crash.

A successful attack requires a malicious user to have read permissions for Observability assigned to them.

Affected products

VendorProductAffectedFixed
Elastic Kibana 7.17.0 – ≤ 7.17.22, 8.0.0 – ≤ 8.15.0 —

Advisories 1

References