| Package | Affected versions | Patched versions |
|---|---|---|
| kibana | ≥ 8.0.0, < 8.14.2< 7.17.23 | 8.14.27.17.23 |
An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted request to /api/log_entries/summary. This can be carried out by users with read access to the Observability-Logs feature in Kibana.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free