CVE-2025-25016 — Kibana Unrestricted Upload of File

CVE-2025-25016

Kibana Unrestricted Upload of File PUBLISHED

Description (CNA)

Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation.

Affected (CNA)

Vendor / product	Versions
Elastic / Kibana	affected 7.17.0 before 7.17.18; affected 8.0.0 before 8.13.0

CWE

CWE-434

References

https://discuss.elastic.co/t/kibana-7-17-19-and-8-13-0-security-update-esa-2024-47/377711

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.