Elastic Kibana One Workflow Server-Side Request Forgery Vulnerability Allowing Information Disclosure

A Server-Side Request Forgery (SSRF) vulnerability has been identified in Kibana One Workflow, specifically in versions 9.3.0 prior to 9.3.3. This vulnerability allows an authenticated user with workflow creation and execution privileges to bypass host allowlist restrictions in the Workflows Execution Engine. As a result, sensitive internal endpoints and data could be exposed.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive internal endpoints and data.

Remediation

Users can upgrade to Kibana version 9.3.3 to address this vulnerability. For those using Elastic Cloud Serverless, the vulnerability has already been remediated.