Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-25009

Fixed in a distro release EPSS <1%CVSS 8.7

Improper Neutralization of Input During Web Page Generation in Kibana can lead to Stored XSS via case file upload.

Published 2025-10-07 · CVE record · OSV

Products: Elastic Kibana

Distro releases

ReleasePackageFixed in
Chainguardkibana-8.17-bitnami8.17.10-r11
Chainguardkibana-8.18-bitnami8.18.8-r10
Chainguardkibana-8.19-bitnami8.19.11-r0