CVE-2025-25009 | Elastic Kibana up to 7.17.29/8.18.7/8.19.4/9.0.7/9.1.4 Case File Upload cross site scripting

October 7, 2025 Yanac

A vulnerability classified as problematic has been found in Elastic Kibana up to 7.17.29/8.18.7/8.19.4/9.0.7/9.1.4. Affected is an unknown function of the component Case File Upload Handler. This manipulation causes cross site scripting.

This vulnerability appears as CVE-2025-25009. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More