← Database

CVE-2025-25016

MEDIUM CVSS: 4.3 Published: 2025-05-01 Modified: 2026-06-17

Description

Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation.

Affected Platforms

Elastic Kibana

Weakness Type

CWE-434

References