Kibana 7.17.15 → 7.17.20

5 releases · 0 breaking changes · 2 security fixes · 2 advisories fixed

2security0breaking0deprecated0feature0fix

Is 7.17.15 affected? · What changed up to 9.5.6

Vulnerabilities fixed by this upgrade

4.3 CVE-2025-25016 Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation.
8.0 CVE-2023-46675 An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error or in the event where debug level logging is enabled in Kibana. Elastic has…

Breaking changes

None in the release notes.

Security changes

security Fixes CVE-2025-25016: Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation. in 7.17.19
security Fixes CVE-2023-46675: An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error or in the event where debug level logging is enabled in Kibana. Elastic has… in 7.17.16

Every release in between

7.17.20 Apr 10, 2024 Release notes ↗

otherDownloads: https://elastic.co/downloads/kibana Release notes: https://www.elastic.co/guide/en/kibana/7.17/release-notes-7.17.20.html

7.17.19 Mar 26, 2024 Release notes ↗

securityFixes CVE-2025-25016: Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation.

otherDownloads: https://elastic.co/downloads/kibana Release notes: https://www.elastic.co/guide/en/kibana/7.17/release-notes-7.17.19.html

7.17.18 Feb 6, 2024 Release notes ↗

otherDownloads: https://elastic.co/downloads/kibana Release notes: https://www.elastic.co/guide/en/kibana/7.17/release-notes-7.17.18.html

7.17.17 Jan 23, 2024 Release notes ↗

otherDownloads: https://elastic.co/downloads/kibana Release notes: https://www.elastic.co/guide/en/kibana/7.17/release-notes-7.17.17.html

7.17.16 Dec 12, 2023 Release notes ↗

securityFixes CVE-2023-46675: An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error or in the event where debug level logging is enabled in Kibana. Elastic has…

otherDownloads: https://elastic.co/downloads/kibana Release notes: https://www.elastic.co/guide/en/kibana/7.17/release-notes-7.17.16.html