Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-37734
4.3
MEDIUMCVSS v3
Severity scale
010
Description
Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant.
elastic/kibana
GitHubYour window into all of your data
GitHubYour window into all of your data>= 8.12.0, < 8.19.7, >= 9.1.0, < 9.1.7, = 9.2.0NVD
elastic/kibana
Docker HubThe Kibana docker images maintained by Elastic!
Docker HubThe Kibana docker images maintained by Elastic!>= 8.12.0, < 8.19.7, >= 9.1.0, < 9.1.7, = 9.2.0NVD