CVE-2025-25017: Kibana Stored Cross-Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation in Kibana can lead to Cross-Site Scripting (XSS)
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-25017?
The severity of CVE-2025-25017 is classified as high due to its potential to facilitate Cross-Site Scripting (XSS) attacks.
How do I fix CVE-2025-25017?
To fix CVE-2025-25017, upgrade to the latest patch version of Kibana that addresses the XSS vulnerability.
What kind of attacks can CVE-2025-25017 enable?
CVE-2025-25017 can enable attackers to execute arbitrary scripts in the context of the user's browser, leading to Cross-Site Scripting (XSS) attacks.
Which software versions are affected by CVE-2025-25017?
CVE-2025-25017 affects various versions of Elastic Kibana prior to the security fix release.
How can I determine if my system is vulnerable to CVE-2025-25017?
You can determine if your system is vulnerable to CVE-2025-25017 by checking if you are running an affected version of Elastic Kibana and if the security updates have been applied.