CVE-2024-37281
Kibana Denial of Service issue
Résumé
Kibana Denial of Service issue
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered in Kibana where a user with Viewer role could cause a Kibana instance to crash by sending a large number of maliciously crafted requests to a specific endpoint.
Paquets affectés
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.17.23"},{"introduced":"8.0.0"},{"fixed":"8.14.0"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.17.23"},{"introduced":"8.0.0"},{"fixed":"8.14.0"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- web discuss.elastic.co