CVE-2025-37734
Kibana Origin Validation Error
Résumé
Kibana Origin Validation Error
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant.
Paquets affectés
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"8.12.0"},{"fixed":"8.19.7"},{"introduced":"9.1.0"},{"fixed":"9.1.7"},{"introduced":"9.2.0"},{"fixed":"9.2.1"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"8.12.0"},{"fixed":"8.19.7"},{"introduced":"9.1.0"},{"fixed":"9.1.7"},{"introduced":"9.2.0"},{"fixed":"9.2.1"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- web discuss.elastic.co
- web github.com