Elastic Kibana Uncontrolled Resource Consumption Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in Elastic Kibana versions 8.19.14, 9.2.8, and 9.3.3. This issue arises from uncontrolled resource consumption, allowing an authenticated user with access to the automatic import feature to send requests with excessively large input values. When multiple such requests are sent concurrently, the backend services become unstable, causing service disruptions and making the deployment unavailable for all users.

Impact

Excessive resource allocation from concurrent requests can destabilize backend services, leading to service disruptions and unavailability for users.