Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-52974

An issue has been identified where a specially crafted request sent to an Observability API could cause the kibana server to crash.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
elastic

Description

An issue has been identified where a specially crafted request sent to an Observability API could cause the kibana server to crash. A successful attack requires a malicious user to have read permissions for Observability assigned to them.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Elastic Kibana

Default version status: unaffected

  • 7.17.0 to ≤ 7.17.22affected
  • 8.0.0 to ≤ 8.15.0affected

References