CVE-2025-37734
Kibana Origin Validation Error
概要
Kibana Origin Validation Error
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant.
影響パッケージ
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"8.12.0"},{"fixed":"8.19.7"},{"introduced":"9.1.0"},{"fixed":"9.1.7"},{"introduced":"9.2.0"},{"fixed":"9.2.1"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"8.12.0"},{"fixed":"8.19.7"},{"introduced":"9.1.0"},{"fixed":"9.1.7"},{"introduced":"9.2.0"},{"fixed":"9.2.1"}]}]
参照URL
- advisory nvd.nist.gov
- advisory github.com
- web discuss.elastic.co
- web github.com