CVE-2024-52973: Kibana allocation of resources without limits or throttling leads to crash
An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted request to /api/logentries/summary. This can be carried out by users with read access to the Observability-Logs feature in Kibana.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-52973?
CVE-2024-52973 is classified with a critical severity due to its potential to cause system crashes.
How do I fix CVE-2024-52973?
To mitigate CVE-2024-52973, users should update to the latest version of Kibana where the vulnerability has been addressed.
What is the impact of CVE-2024-52973?
CVE-2024-52973 can lead to application crashes when specially crafted requests are sent to the Kibana API.
Who is affected by CVE-2024-52973?
Users with read access to the Observability-Logs feature in Kibana are affected by CVE-2024-52973.
What versions of Kibana are vulnerable to CVE-2024-52973?
CVE-2024-52973 affects multiple versions of Kibana, particularly those prior to the security updates.