Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-25017
8.2
HIGHCVSS v3
Severity scale
010
Description
Improper Neutralization of Input During Web Page Generation in Kibana can lead to Cross-Site Scripting (XSS)
elastic/kibana
GitHubYour window into all of your data
GitHubYour window into all of your data>= 7.0.0, < 8.18.8, >= 8.19.0, < 8.19.4, >= 9.0.0, < 9.0.7, >= 9.1.0, < 9.1.4NVD
elastic/kibana
Docker HubThe Kibana docker images maintained by Elastic!
Docker HubThe Kibana docker images maintained by Elastic!>= 7.0.0, < 8.18.8, >= 8.19.0, < 8.19.4, >= 9.0.0, < 9.0.7, >= 9.1.0, < 9.1.4NVD