← CVE Intelligence

CVE-2025-37734

Kibana Origin Validation Error PUBLISHED

Description (CNA)

Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant.

Affected (CNA)

Vendor / productVersions
Elastic / Kibanaaffected 8.12.0 through 8.19.6; affected 9.1.0 through 9.1.6; affected 9.2.0

CWE

CWE-346

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.