CVE-2025-25016
Kibana Unrestricted Upload of File
Résumé
Kibana Unrestricted Upload of File
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation.
Paquets affectés
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"7.17.0"},{"fixed":"7.17.18"},{"introduced":"8.0.0"},{"fixed":"8.13.0"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"7.17.0"},{"fixed":"7.17.18"},{"introduced":"8.0.0"},{"fixed":"8.13.0"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- web discuss.elastic.co