CVE-2025-68389

6.5MEDIUM

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can allow a low-privileged authenticated user to cause Excessive Allocation (CAPEC-130) of computing resources and a denial of

发布于: 12/18/2025更新于: 12/23/2025

描述

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can allow a low-privileged authenticated user to cause Excessive Allocation (CAPEC-130) of computing resources and a denial of service (DoS) of the Kibana process via a crafted HTTP request.

AI分析AI驱动

受影响产品

elastickibana
elastickibana
elastickibana
elastickibana

参考资料