CVE-2024-43708 in Kibana

Riassunto

di MITRE • 23/01/2025

An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted payload to a number of inputs in Kibana UI. This can be carried out by users with read access to any feature in Kibana.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsabile: Elastic
• Prenotare: 15/08/2024
• Divulgazione: 23/01/2025
• Moderazione: accettato
• Voce: VDB-293132
• CPE: pronto
• CWE: CWE-770 (confermato)
• CVSS: 6.5 (CNA)
• EPSS: 0.00381
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-43708
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-43708
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-43708/