Kibana 7.17.23 → 7.17.24

1 release · 0 breaking changes · 1 security fix · 1 advisory fixed

1security0breaking0deprecated0feature0fix

Is 7.17.23 affected? · What changed up to 9.5.6

Vulnerabilities fixed by this upgrade

5.4 CVE-2024-11390 Unrestricted upload of a file with dangerous type in Kibana can lead to arbitrary JavaScript execution in a victim’s browser (XSS) via crafted HTML and JavaScript files. The attacker must have acc…

Breaking changes

None in the release notes.

Security changes

security Fixes CVE-2024-11390: Unrestricted upload of a file with dangerous type in Kibana can lead to arbitrary JavaScript execution in a victim’s browser (XSS) via crafted HTML and JavaScript files. The attacker must have acc… in 7.17.24

Every release in between

7.17.24 Sep 10, 2024 Release notes ↗

securityFixes CVE-2024-11390: Unrestricted upload of a file with dangerous type in Kibana can lead to arbitrary JavaScript execution in a victim’s browser (XSS) via crafted HTML and JavaScript files. The attacker must have acc…

otherDownloads: https://elastic.co/downloads/kibana Release notes: https://www.elastic.co/guide/en/kibana/7.17/release-notes-7.17.24.html