CVE-2025-25012
Kibana Open Redirect
Summary
Kibana Open Redirect
Original description
The description as published by the source.
URL redirection to an untrusted site ('Open Redirect') in Kibana can lead to sending a user to an arbitrary site and server-side request forgery via a specially crafted URL.
Affected packages
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.17.29"},{"introduced":"8.0.0"},{"fixed":"8.18.3"},{"introduced":"9.0.0"},{"fixed":"9.0.3"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.17.29"},{"introduced":"8.0.0"},{"fixed":"8.18.3"},{"introduced":"9.0.0"},{"fixed":"9.0.3"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- web discuss.elastic.co