CVE-2024-12556

8.7

HIGHCVSS v3

Published

April 8, 2025

Affected

2 projects

Assigned by

Severity scale

010

Description

Prototype Pollution in Kibana can lead to code injection via unrestricted file upload combined with path traversal.

GitHubYour window into all of your data

>= 8.16.1, < 8.16.4, >= 8.17.0, < 8.17.2NVD

Docker HubThe Kibana docker images maintained by Elastic!

>= 8.16.1, < 8.16.4, >= 8.17.0, < 8.17.2NVD