← Database

CVE-2024-43706

HIGH CVSS: 7.6 Published: 2025-06-10 Modified: 2026-06-17

Description

Improper authorization in Kibana can lead to privilege abuse via a direct HTTP request to a Synthetic monitor endpoint.

Affected Platforms

Elastic Kibana

Weakness Type

CWE-285

References