Kibana Unrestricted File Upload Vulnerability Allowing Integrity Compromise

A vulnerability in Kibana versions 7.17.0 to 7.17.18 and 8.0.0 to 8.12.3 allows unrestricted file uploads. This issue enables authenticated attackers to compromise software integrity by uploading malicious files, exploiting inadequate server-side validation.

Impact

Exploitation of this vulnerability could lead to unauthorized file uploads, allowing for potential manipulation or replacement of existing files, which could be used to execute malicious code or disrupt normal application operations.

Remediation

Users can upgrade to Kibana versions 7.17.19 or higher, or 8.13.0 or higher, to address this vulnerability.