CVE-2024-12556

No fix known EPSS <1%CVSS 8.7

Prototype Pollution in Kibana can lead to code injection via unrestricted file upload combined with path traversal.

Published 2025-04-08 · CVE record · OSV

Products: Elastic Kibana