CVE-2025-25009

HIGH CVSS: 8.7 Published: 2025-10-07 Modified: 2026-06-17

Description

Improper Neutralization of Input During Web Page Generation in Kibana can lead to Stored XSS via case file upload.

Elastic Kibana

CWE-79