CVE-2025-25014 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints.
Critical CVSS: 9.1

CVE-2025-25014

A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints.
Vendor
Elastic
Product
Kibana
CWE
CWE-1321
Yayın Tarihi
2025-05-06 18:15:37
Güncelleme
2025-10-02 16:26:53
Source Identifier
security@elastic.co
KEV Date Added
-

Kategoriler

CWE-1321 Kibana CRITICAL Elastic 2025

Referanslar

https://discuss.elastic.co/t/kibana-8-17-6-8-18-1-or-9-0-1-security-update-esa-2025-07/377868