Description
Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Elastic | Kibana | 7.17.0 – < 7.17.18, 8.0.0 – < 8.13.0 | 7.17.18 |
Advisories 1
- WID-SEC-2025-0917 Kibana: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 1, 2025