CVE-2025-68389
Kibana Allocation of Resources Without Limits or Throttling
Résumé
Kibana Allocation of Resources Without Limits or Throttling
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can allow a low-privileged authenticated user to cause Excessive Allocation (CAPEC-130) of computing resources and a denial of service (DoS) of the Kibana process via a crafted HTTP request.
Paquets affectés
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.19.9"},{"introduced":"9.0.0"},{"fixed":"9.1.9"},{"introduced":"9.2.0"},{"fixed":"9.2.3"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.19.9"},{"introduced":"9.0.0"},{"fixed":"9.1.9"},{"introduced":"9.2.0"},{"fixed":"9.2.3"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- web discuss.elastic.co