CVE-2025-25012
Fixed in a distro release EPSS <1%CVSS 4.3
URL redirection to an untrusted site ('Open Redirect') in Kibana can lead to sending a user to an arbitrary site and server-side request forgery via a specially crafted URL.
Products: Elastic Kibana
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | kibana-8.17-bitnami | 8.17.10-r11 |
| Chainguard | kibana-8.18-bitnami | 8.18.8-r10 |
| Chainguard | kibana-8.19-bitnami | 8.19.11-r0 |