high8.7
CVE-2025-25009
Improper Neutralization of Input During Web Page Generation in Kibana can lead to Stored XSS via case file upload.
Impact
Improper Neutralization of Input During Web Page Generation in Kibana can lead to Stored XSS via case file upload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elastic | Kibana | from 7.0.0 before 8.18.8 from 8.19.0 before 8.19.5 from 9.0.0 before 9.0.8 from 9.1.0 before 9.1.5 |