medium4.3
CVE-2025-25016
Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient …
Impact
Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elastic | Kibana | from 7.17.0 before 7.17.19 from 8.0.0 before 8.13.0 |