Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-25012
4.3
MEDIUMCVSS v3
Severity scale
010
Description
URL redirection to an untrusted site ('Open Redirect') in Kibana can lead to sending a user to an arbitrary site and server-side request forgery via a specially crafted URL.
elastic/kibana
GitHubYour window into all of your data
GitHubYour window into all of your data>= 7.0.0, < 7.17.29, >= 8.0.0, < 8.17.8, >= 8.18.0, < 8.18.3, >= 9.0.0, < 9.0.3NVD
elastic/kibana
Docker HubThe Kibana docker images maintained by Elastic!
Docker HubThe Kibana docker images maintained by Elastic!>= 7.0.0, < 7.17.29, >= 8.0.0, < 8.17.8, >= 8.18.0, < 8.18.3, >= 9.0.0, < 9.0.3NVD