Kibana 7.17.18 → 7.17.20

2 releases · 0 breaking changes · 1 security fix · 1 advisory fixed

1security0breaking0deprecated0feature0fix

Is 7.17.18 affected? · What changed up to 9.5.6

Vulnerabilities fixed by this upgrade

4.3 CVE-2025-25016 Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation.

Breaking changes

None in the release notes.

Security changes

security Fixes CVE-2025-25016: Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation. in 7.17.19

Every release in between

7.17.20 Apr 10, 2024 Release notes ↗

otherDownloads: https://elastic.co/downloads/kibana Release notes: https://www.elastic.co/guide/en/kibana/7.17/release-notes-7.17.20.html

7.17.19 Mar 26, 2024 Release notes ↗

securityFixes CVE-2025-25016: Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation.

otherDownloads: https://elastic.co/downloads/kibana Release notes: https://www.elastic.co/guide/en/kibana/7.17/release-notes-7.17.19.html