CVE-2025-68389

Publication date

2025-12-18 22:14:51

Family

elastic

State

PUBLISHED

Description

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can allow a low-privileged authenticated user to cause Excessive Allocation (CAPEC-130) of computing resources and a denial of service (DoS) of the Kibana process via a crafted HTTP request.