| Package | Affected versions | Patched versions |
|---|---|---|
| kibana | ≥ 9.4.0, < 9.4.4 | 9.4.4 |
Missing Authorization (CWE-862) in Kibana can lead to unauthorized cross-space information disclosure via user-supplied input that circumvents space-level access control.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free