CVE-2026-26940
Improper Validation of Specified Quantity in Input in Kibana Leading to Denial of Service
概要
Improper Validation of Specified Quantity in Input in Kibana Leading to Denial of Service
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Improper Validation of Specified Quantity in Input (CWE-1284) in the Timelion visualization plugin in Kibana can lead Denial of Service via Excessive Allocation (CAPEC-130). The vulnerability allows an authenticated user to send a specially crafted Timelion expression that overwrites internal series data properties with an excessively large quantity value.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web discuss.elastic.co