CVE-2024-23443: Elastic Kibana

Medium severity, CVSS 4.9. EPSS: 1.8% chance of exploitation in the next 30 days.

A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a maliciously crafted osquery pack.

Affected products

• Elastic Kibana: from 7.0.0, before 7.17.22 (fixed in 7.17.22); from 8.0.0, before 8.14.0 (fixed in 8.14.0)

Published 2024-06-19. Last modified 2026-06-17.