CVE-2025-25016
Kibana Unrestricted Upload of File
Summary
Kibana Unrestricted Upload of File
Original description
The description as published by the source.
Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation.
Affected packages
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"7.17.0"},{"fixed":"7.17.18"},{"introduced":"8.0.0"},{"fixed":"8.13.0"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"7.17.0"},{"fixed":"7.17.18"},{"introduced":"8.0.0"},{"fixed":"8.13.0"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- web discuss.elastic.co