Description
Elastic Kibana 需授权 原型污染漏洞 可导致任意代码执行
Elastic Kibana 需授权 原型污染漏洞 可导致任意代码执行
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.secrss.com/articles/78450
https://www.51cto.com/article/815100.html
https://it.shanghaitech.edu.cn/2025/0309/c8406a1108047/page.htm
https://www.venustech.com.cn/new_type/aqtg/20250307/28432.html
https://blog.csdn.net/yuanlirong22/article/details/146099333
https://www.ithome.com.tw/news/168798
https://madneal.com/post/kibana%E4%BB%BB%E6%84%8F%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/
https://blog.nsfocus.net/elastic-kibana/
https://stack.chaitin.com/vuldb/detail/fe6365c6-09cc-47d2-9a1b-1db7afae0b18
https://starmap.dbappsecurity.com.cn/info/10919
https://www.cnetsec.com/article/42338.html
https://cloud.tencent.com/developer/article/1545416
https://www.anquanfuwu.net/article/detail/67c942ee14037f0e4935dec6
https://www.4hou.com/posts/NGn2
https://www.facebook.com/ithomeonline/posts/elastic%E4%BF%AE%E8%A3%9Fkibana%E5%8E%9F%E5%9E%8B%E6%B1%A1%E6%9F%93%E6%BC%8F%E6%B4%9Ecve-2025-25014%E6%94%BB%E6%93%8A%E8%80%85%E5%8F%AF%E5%9C%A8%E5%95%9F%E7%94%A8%E7%89%B9%E5%AE%9A%E5%8F%8B%E5%8A%9F%E8%83%BD%E6%99%8B%E5%8E%9B%E7%9B%B8%E6%9F%93%E7%B4%9A%E6%88%96%E9%97%9C%E9%96%89%E6%A8%A1%E7%B5%84%E4%BB%A5%E9%99%8D%E4%BD%8E/719346397099366/
https://www.163.com/dy/article/JQ5B4EA20511A5GF.html
https://discuss.elastic.co/t/kibana-8-17-6-8-18-1-or-9-0-1-security-update-esa-2025-07/377868
https://github.com/vulhub/vulhub/blob/master/kibana/CVE-2019-7609/README.zh-cn.md
https://www.lwd3699.com/anquan/2788.html
https://security.snyk.io/vuln/SNYK-JS-KIBANA-9376712
https://www.rescana.com/post/critical-security-update-for-elastic-s-kibana-cve-2025-25015
https://nsfocusglobal.com/elastic-kibana-prototype-contamination-leads-to-arbitrary-code-execution-vulnerability-cve-2025-25014/
https://kudelskisecurity.com/research/critical-kibana-vulnerability-enabling-remote-code-execution
https://thehackernews.com/2025/03/elastic-releases-urgent-fix-for.html
https://www.rapid7.com/db/modules/exploit/linux/http/kibana_timelion_prototype_pollution_rce/
https://feedly.com/cve/CVE-2025-25012
https://www.sentinelone.com/vulnerability-database/cve-2025-25015/
https://www.linkedin.com/posts/thehackernews_elastic-has-rolled-out-critical-updates-to-activity-7303399698013270016-wYkX