| Package | Affected versions | Patched versions |
|---|---|---|
| kibana | ≥ 9.4.0, < 9.4.4 | 9.4.4 |
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via user-supplied identifiers that reference scheduled query result data from Kibana Spaces the requester is not authorized to access.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free