CVE-2025-25012
Kibana Open Redirect
Résumé
Kibana Open Redirect
Description d'origine
La description telle que publiée par la source (souvent en anglais).
URL redirection to an untrusted site ('Open Redirect') in Kibana can lead to sending a user to an arbitrary site and server-side request forgery via a specially crafted URL.
Paquets affectés
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.17.29"},{"introduced":"8.0.0"},{"fixed":"8.18.3"},{"introduced":"9.0.0"},{"fixed":"9.0.3"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.17.29"},{"introduced":"8.0.0"},{"fixed":"8.18.3"},{"introduced":"9.0.0"},{"fixed":"9.0.3"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- web discuss.elastic.co