CVE-2024-23443
A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a maliciously crafted osquery p...
Original description
The description as published by the source.
A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a maliciously crafted osquery pack.
Affected packages
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.14.0"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.14.0"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- web discuss.elastic.co