Resource Allocation Flaw in Kibana by Elastic

CVE-2024-52973

What is CVE-2024-52973?

A resource allocation issue in Kibana allows users with read access to the Observability-Logs feature to crash the application by sending a specially crafted request to the /api/log_entries/summary endpoint. This vulnerability does not impose limits or throttling, which can lead to severe application stability issues and unauthorized control over resource consumption.

References