Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-25009
8.7
HIGHCVSS v3
Severity scale
010
Description
Improper Neutralization of Input During Web Page Generation in Kibana can lead to Stored XSS via case file upload.
elastic/kibana
GitHubYour window into all of your data
GitHubYour window into all of your data>= 7.0.0, < 8.18.8, >= 8.19.0, < 8.19.5, >= 9.0.0, < 9.0.8, >= 9.1.0, < 9.1.5NVD
elastic/kibana
Docker HubThe Kibana docker images maintained by Elastic!
Docker HubThe Kibana docker images maintained by Elastic!>= 7.0.0, < 8.18.8, >= 8.19.0, < 8.19.5, >= 9.0.0, < 9.0.8, >= 9.1.0, < 9.1.5NVD