CVE-2026-26940
Improper Validation of Specified Quantity in Input in Kibana Leading to Denial of Service
Résumé
Improper Validation of Specified Quantity in Input in Kibana Leading to Denial of Service
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Improper Validation of Specified Quantity in Input (CWE-1284) in the Timelion visualization plugin in Kibana can lead Denial of Service via Excessive Allocation (CAPEC-130). The vulnerability allows an authenticated user to send a specially crafted Timelion expression that overwrites internal series data properties with an excessively large quantity value.
Références
- advisory github.com
- advisory nvd.nist.gov
- web discuss.elastic.co