| Package | Affected versions | Patched versions |
|---|---|---|
| kibana | ≥ 7.10.0, < 7.17.29≥ 8.0.0, < 8.19.10≥ 9.0.0, < 9.1.10≥ 9.2.0, < 9.2.4 | 7.17.298.19.109.1.109.2.4 |
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana Fleet can lead to Excessive Allocation (CAPEC-130) via a specially crafted request. This causes the application to perform redundant processing operations that continuously consume system resources until service degradation or complete unavailability occurs.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free