Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-37281

Kibana Denial of Service issue

Description

An issue was discovered in Kibana where a user with Viewer role could cause a Kibana instance to crash by sending a large number of maliciously crafted requests to a specific endpoint.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Elastic Kibana

Default version status: unaffected

  • 7.x to < 7.17.23affected
  • 8.x to < 8.14.0affected

References