| Package | Affected versions | Patched versions |
|---|---|---|
| kibana | ≥ 8.0.0, < 8.15.0< 7.17.23 | 8.15.07.17.23 |
An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted request to /api/metrics/snapshot. This can be carried out by users with read access to the Observability Metrics or Logs features in Kibana.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free