Description
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana Fleet can lead to Excessive Allocation (CAPEC-130) via a specially crafted request. This causes the application to perform redundant processing operations that continuously consume system resources until service degradation or complete unavailability occurs.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Elastic Kibana
Default version status: unaffected
7.10.0 to ≤ 7.17.29affected8.0.0 to ≤ 8.19.9affected9.0.0 to ≤ 9.1.9affected9.2.0 to ≤ 9.2.3affected