Kibana 7.17.13 → 7.17.19

6 releases · 0 breaking changes · 3 security fixes · 3 advisories fixed

3security0breaking0deprecated0feature0fix

Is 7.17.13 affected? · What changed up to 9.5.6

Vulnerabilities fixed by this upgrade

8.0 CVE-2026-49091 Improper Output Neutralization for Logs (CWE-117) in Kibana can lead to log injection via Log Injection-Tampering-Forging (CAPEC-93). An attacker can supply specially crafted input that is written…
4.3 CVE-2025-25016 Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation.
8.0 CVE-2023-46675 An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error or in the event where debug level logging is enabled in Kibana. Elastic has…

Breaking changes

None in the release notes.

Security changes

security Fixes CVE-2025-25016: Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation. in 7.17.19
security Fixes CVE-2023-46675: An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error or in the event where debug level logging is enabled in Kibana. Elastic has… in 7.17.16
security Fixes CVE-2026-49091: Improper Output Neutralization for Logs (CWE-117) in Kibana can lead to log injection via Log Injection-Tampering-Forging (CAPEC-93). An attacker can supply specially crafted input that is written… in 7.17.15

Every release in between

7.17.19 Mar 26, 2024 Release notes ↗

securityFixes CVE-2025-25016: Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation.

otherDownloads: https://elastic.co/downloads/kibana Release notes: https://www.elastic.co/guide/en/kibana/7.17/release-notes-7.17.19.html

7.17.18 Feb 6, 2024 Release notes ↗

otherDownloads: https://elastic.co/downloads/kibana Release notes: https://www.elastic.co/guide/en/kibana/7.17/release-notes-7.17.18.html

7.17.17 Jan 23, 2024 Release notes ↗

otherDownloads: https://elastic.co/downloads/kibana Release notes: https://www.elastic.co/guide/en/kibana/7.17/release-notes-7.17.17.html

7.17.16 Dec 12, 2023 Release notes ↗

securityFixes CVE-2023-46675: An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error or in the event where debug level logging is enabled in Kibana. Elastic has…

otherDownloads: https://elastic.co/downloads/kibana Release notes: https://www.elastic.co/guide/en/kibana/7.17/release-notes-7.17.16.html

7.17.15 Nov 13, 2023 Release notes ↗

securityFixes CVE-2026-49091: Improper Output Neutralization for Logs (CWE-117) in Kibana can lead to log injection via Log Injection-Tampering-Forging (CAPEC-93). An attacker can supply specially crafted input that is written…

otherDownloads: https://elastic.co/downloads/kibana Release notes: https://www.elastic.co/guide/en/kibana/7.17/release-notes-7.17.15.html

7.17.14 Oct 10, 2023 Release notes ↗

otherDownloads: https://elastic.co/downloads/kibana Release notes: https://www.elastic.co/guide/en/kibana/7.17/release-notes-7.17.14.html