medium6.5
CVE-2024-52973
An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted request to /api/log_entries/summary.
Impact
An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted request to /api/log_entries/summary. This can be carried out by users with read access to the Observability-Logs feature in Kibana.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elastic | Kibana | before 7.17.23 from 8.0.0 before 8.14.2 |