https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 05:02:55 +0000 https://cve.radiocsirt.org/vuln/bit-elk-2024-43710 <p><strong>Affected:</strong> Bitnami: elk</p> <p>A server side request forgery vulnerability was identified in Kibana where the /api/fleet/health_check API could be used to send requests to internal endpoints. Due to the nature of the underlying request, only endpoints available over https that return JSON could be accessed. This can be carried out by users with read access to Fleet.</p> <p><strong>Affected:</strong> Bitnami: elk</p> <p>A server side request forgery vulnerability was identified in Kibana where the /api/fleet/health_check API could be used to send requests to internal endpoints. Due to the nature of the underlying request, only endpoints available over https that return JSON could be accessed. This can be carried out by users with read access to Fleet.</p> https://cve.radiocsirt.org/vuln/bit-elk-2024-43710 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0062 certfr-2025-avi-0062 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0062 https://cve.radiocsirt.org/vuln/euvd-2026-211527 EUVD-2026-211527 https://cve.radiocsirt.org/vuln/euvd-2026-211527 https://cve.radiocsirt.org/vuln/fkie_cve-2024-43710 <p>A server side request forgery vulnerability was identified in Kibana where the /api/fleet/health_check API could be used to send requests to internal endpoints. Due to the nature of the underlying request, only endpoints available over https that return JSON could be accessed. This can be carried out by users with read access to Fleet.</p> <p>A server side request forgery vulnerability was identified in Kibana where the /api/fleet/health_check API could be used to send requests to internal endpoints. Due to the nature of the underlying request, only endpoints available over https that return JSON could be accessed. This can be carried out by users with read access to Fleet.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-43710 https://cve.radiocsirt.org/vuln/ghsa-5vxg-7wx9-4fp4 <p>A server side request forgery vulnerability was identified in Kibana where the /api/fleet/health_check API could be used to send requests to internal endpoints. Due to the nature of the underlying request, only endpoints available over https that return JSON could be accessed. This can be carried out by users with read access to Fleet.</p> <p>A server side request forgery vulnerability was identified in Kibana where the /api/fleet/health_check API could be used to send requests to internal endpoints. Due to the nature of the underlying request, only endpoints available over https that return JSON could be accessed. This can be carried out by users with read access to Fleet.</p> https://cve.radiocsirt.org/vuln/ghsa-5vxg-7wx9-4fp4 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0179 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Informationen preiszugeben, Daten zu manipulieren oder einen Denial-of-Service-Zustand zu erzeugen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Informationen preiszugeben, Daten zu manipulieren oder einen Denial-of-Service-Zustand zu erzeugen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0179