CVE-2024-43708: Medium severity elastic vulnerability
Published Jan 23, 2025
·Updated
An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted payload to a number of inputs in Kibana UI. This can be carried out by users with read access to any feature in Kibana.
Affected Software
3 affected components
Elastic Kibana
Elastic Kibana<7.17.23
Elastic Kibana>=8.0.0<8.15.0
Remediation
Event History
Jan 23, 2025
CVE Published
via MITRE·10:27 AM
Data Sourced
via MITRE·10:27 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-43708?
CVE-2024-43708 has been classified with high severity due to its potential to cause crashes in Kibana.
2
How do I fix CVE-2024-43708?
To fix CVE-2024-43708, you should update Kibana to the latest version where the vulnerability has been addressed.
3
Who is affected by CVE-2024-43708?
CVE-2024-43708 affects users with read access to any feature in Kibana.
4
What types of attacks can exploit CVE-2024-43708?
CVE-2024-43708 can be exploited through specially crafted payloads sent to various inputs within the Kibana UI.
5
Is there a workaround for CVE-2024-43708 before the fix is applied?
There are currently no recommended workarounds for CVE-2024-43708, so upgrading is the best option.