Description
Elastic Kibana是Elastic公司的一个可用数据可视化仪表板软件。 Elastic Kibana 7.17.0版本至7.17.22版本和8.0.0版本至8.15.0版本存在资源管理错误漏洞，该漏洞源于处理特制请求至 Observability API时存在缺陷，可能导致服务器崩溃。
Elastic Kibana 资源管理错误漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.knowsafe.com/ti/info/0/987238
https://www.cnvd.org.cn/patchInfo/show/232003
https://139.196.136.194/detail?id=AVD-2024-52974
https://vulners.com/cve/CVE-2024-52974
https://avd.aliyun.com/product?prod=kibana
https://www.elastic.co/docs/release-notes/security
https://discuss.elastic.co/t/kibana-7-17-29-8-17-8-8-18-3-9-0-3-security-update-esa-2025-09/379443
https://thehackernews.com/2025/03/elastic-releases-urgent-fix-for.html
https://www.runzero.com/blog/elastic-kibana-2/
https://cve.imfht.com/detail/CVE-2026-33459