CVE-2024-52974
An issue has been identified where a specially crafted request sent to an Observability API could cause the kibana server to crash. A successful atta...
Original description
The description as published by the source.
An issue has been identified where a specially crafted request sent to an Observability API could cause the kibana server to crash.
A successful attack requires a malicious user to have read permissions for Observability assigned to them.
Affected packages
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"7.17.0"},{"fixed":"7.17.23"},{"introduced":"8.0.0"},{"fixed":"8.15.1"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"7.17.0"},{"fixed":"7.17.23"},{"introduced":"8.0.0"},{"fixed":"8.15.1"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- web discuss.elastic.co