CVE-2024-37281
Kibana Denial of Service issue
Summary
Kibana Denial of Service issue
Original description
The description as published by the source.
An issue was discovered in Kibana where a user with Viewer role could cause a Kibana instance to crash by sending a large number of maliciously crafted requests to a specific endpoint.
Affected packages
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.17.23"},{"introduced":"8.0.0"},{"fixed":"8.14.0"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.17.23"},{"introduced":"8.0.0"},{"fixed":"8.14.0"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- web discuss.elastic.co