CVE-2024-52972
Kibana allocation of resources without limits or throttling leads to crash
概要
Kibana allocation of resources without limits or throttling leads to crash
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted request to /api/metrics/snapshot. This can be carried out by users with read access to the Observability Metrics or Logs features in Kibana.
影響パッケージ
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.17.23"},{"introduced":"8.0.0"},{"fixed":"8.15.0"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.17.23"},{"introduced":"8.0.0"},{"fixed":"8.15.0"}]}]
参照URL
- advisory discuss.elastic.co
- web nvd.nist.gov