Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-52973

An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted request to /api/log_entries/summary. This can be carried out by users with read access to the Observability-Logs feature in Kibana.

Published

2025-01-21T11:15:10.200

Last Modified

2025-09-30T21:01:56.233

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-770
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application elastic kibana < 7.17.23 Yes
Application elastic kibana < 8.14.2 Yes
References