Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-33459

Опубликовано: 08 апр. 2026
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with access to the automatic import feature can submit specially crafted requests with excessively large input values. When multiple such requests are sent concurrently, the backend services become unstable, resulting in service disruption and deployment unavailability for all users.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*
Версия от 8.15.0 (включая) до 8.19.14 (исключая)
cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*
Версия от 9.0.0 (включая) до 9.2.8 (исключая)
cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*
Версия от 9.3.0 (включая) до 9.3.3 (исключая)

EPSS

Процентиль: 19%
0.00269
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 6.5
debian
4 месяца назад

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to deni ...

CVSS3: 6.5
github
4 месяца назад

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with access to the automatic import feature can submit specially crafted requests with excessively large input values. When multiple such requests are sent concurrently, the backend services become unstable, resulting in service disruption and deployment unavailability for all users.

EPSS

Процентиль: 19%
0.00269
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-400