CVE-2025-37734

Опубликовано: 12 нояб. 2025

Источник: redhat

CVSS3: 4.3

EPSS Низкий

Описание

Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant.

A flaw was found in Kibana. This vulnerability allows Server-Side Request Forgery via a forged Origin HTTP header.

Отчет

This vulnerability doesn't affected any supported Red Hat product as this vulnerability affects Kibana through the following versions: 8.12.0 up to and including 8.19.6 9.1.0 up to and including 9.1.6 9.2.0 While the Kibana version shipped with OpenShift Logging 5.8 is Kibana-6.8.1

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Logging Subsystem for Red Hat OpenShift	openshift-logging/kibana6-rhel8	Not affected

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-346

https://bugzilla.redhat.com/show_bug.cgi?id=2414471kibana: Kibana: Origin Validation Error leads to Server-Side Request Forgery

EPSS

Процентиль: 12%

0.00213

Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVE-2025-37734

CVSS3: 4.3

nvd

10 месяцев назад

Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant.

CVE-2025-37734

CVSS3: 4.3

debian

10 месяцев назад

Origin Validation Error in Kibana can lead to Server-Side Request Forg ...

ROS-20260224-80-0026

CVSS3: 4.3

redos

6 месяцев назад

Уязвимость kibana

GHSA-m9mr-r5g3-7p6r

CVSS3: 4.3

github

10 месяцев назад

Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant.

EPSS

Процентиль: 12%

0.00213

Низкий

4.3 Medium

CVSS3