Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitycritical

Elastic patches critical Kibana flaw allowing code execution

Security Affairsby @securityaffairs ()1 min read3
Read at securityaffairs.com
Analyze CVE-2025-25012 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2025-25012
Tags
cve-2025-25012vulnerability

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2025-25012
URL redirection to an untrusted site ('Open Redirect') in Kibana can lead to sending a user to an arbitrary site and server-side request forgery via a…
5.4<1%

From the original article

1 min read at securityaffairs.com

Elastic fixed a critical flaw in the Kibana data visualization dashboard software for Elasticsearch that could lead to arbitrary code execution. Elastic released security updates to address a critical vulnerability, tracked as CVE-2025-25012 (CVSS score of 9. 9), impacting the Kibana data visualization dashboard software for Elasticsearch.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.