CVE-2024-52974
An issue has been identified where a specially crafted request sent to an Observability API could cause the kibana server to crash. A successful atta...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue has been identified where a specially crafted request sent to an Observability API could cause the kibana server to crash.
A successful attack requires a malicious user to have read permissions for Observability assigned to them.
Paquets affectés
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"7.17.0"},{"fixed":"7.17.23"},{"introduced":"8.0.0"},{"fixed":"8.15.1"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"7.17.0"},{"fixed":"7.17.23"},{"introduced":"8.0.0"},{"fixed":"8.15.1"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- web discuss.elastic.co