Description
Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Elastic Kibana
Default version status: unaffected
7.17.0 to < 7.17.18affected8.0.0 to < 8.13.0affected