CVE-2024-12556
08.04.2025, 20:15
Prototype Pollution in Kibana can lead to code injection via unrestricted file upload combined with path traversal.
| Vendor | Product | Version |
|---|---|---|
| elastic | kibana | 8.16.1 ≤ 𝑥 < 8.16.4 |
| elastic | kibana | 8.17.0 ≤ 𝑥 < 8.17.2 |
𝑥
= Vulnerable software versions