CVE-2025-25016

No fix known EPSS <1%CVSS 4.3

Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation.

Published 2025-05-01 · CVE record · OSV

Products: Elastic Kibana