Volerion logoVolerion
Volerion logoVolerion

Elastic Kibana Resource Exhaustion Vulnerability Leading to Denial-of-Service

Vulnerability

A denial-of-service vulnerability has been identified in Elastic Kibana, specifically in versions through 7.17.22 and 8.0.0 up to and including 8.14.3. The issue arises from an allocation of resources without proper limits or throttling, allowing users with read access to certain features, such as Observability Metrics or Logs, to send specially crafted requests that can crash the application.

Impact

Exploitation of this vulnerability causes Kibana to crash, disrupting service and availability.

Remediation

Users can upgrade to Kibana versions 7.17.23 or 8.15.0 to address this vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
5.7
impact
2.5
exploitability
4.9
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.