CVE-2025-68389
Kibana Allocation of Resources Without Limits or Throttling
Summary
Kibana Allocation of Resources Without Limits or Throttling
Original description
The description as published by the source.
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can allow a low-privileged authenticated user to cause Excessive Allocation (CAPEC-130) of computing resources and a denial of service (DoS) of the Kibana process via a crafted HTTP request.
Affected packages
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.19.9"},{"introduced":"9.0.0"},{"fixed":"9.1.9"},{"introduced":"9.2.0"},{"fixed":"9.2.3"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.19.9"},{"introduced":"9.0.0"},{"fixed":"9.1.9"},{"introduced":"9.2.0"},{"fixed":"9.2.3"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- web discuss.elastic.co