Kibana 7.17.7 → 7.17.15

8 releases · 0 breaking changes · 3 security fixes · 3 advisories fixed

3security0breaking0deprecated0feature0fix

Is 7.17.7 affected? · What changed up to 9.5.6

Vulnerabilities fixed by this upgrade

8.0 CVE-2026-49091 Improper Output Neutralization for Logs (CWE-117) in Kibana can lead to log injection via Log Injection-Tampering-Forging (CAPEC-93). An attacker can supply specially crafted input that is written…
6.1 CVE-2022-38779 An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL.
6.5 CVE-2022-38778 A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated user to perform a request that crashes the Kibana server process.

Breaking changes

None in the release notes.

Security changes

security Fixes CVE-2026-49091: Improper Output Neutralization for Logs (CWE-117) in Kibana can lead to log injection via Log Injection-Tampering-Forging (CAPEC-93). An attacker can supply specially crafted input that is written… in 7.17.15
security Fixes CVE-2022-38778: A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated user to perform a request that crashes the Kibana server process. in 7.17.9
security Fixes CVE-2022-38779: An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL. in 7.17.9

Every release in between

7.17.15 Nov 13, 2023 Release notes ↗

securityFixes CVE-2026-49091: Improper Output Neutralization for Logs (CWE-117) in Kibana can lead to log injection via Log Injection-Tampering-Forging (CAPEC-93). An attacker can supply specially crafted input that is written…

otherDownloads: https://elastic.co/downloads/kibana Release notes: https://www.elastic.co/guide/en/kibana/7.17/release-notes-7.17.15.html

7.17.14 Oct 10, 2023 Release notes ↗

otherDownloads: https://elastic.co/downloads/kibana Release notes: https://www.elastic.co/guide/en/kibana/7.17/release-notes-7.17.14.html

7.17.13 Sep 6, 2023 Release notes ↗

otherDownloads: https://elastic.co/downloads/kibana Release notes: https://www.elastic.co/guide/en/kibana/7.17/release-notes-7.17.13.html

7.17.12 Jul 25, 2023 Release notes ↗

otherDownloads: https://elastic.co/downloads/kibana Release notes: https://www.elastic.co/guide/en/kibana/7.17/release-notes-7.17.12.html

7.17.11 Jun 29, 2023 Release notes ↗

otherDownloads: https://elastic.co/downloads/kibana Release notes: https://www.elastic.co/guide/en/kibana/7.17/release-notes-7.17.11.html

7.17.10 May 2, 2023 Release notes ↗

otherDownloads: https://elastic.co/downloads/kibana Release notes: https://www.elastic.co/guide/en/kibana/7.17/release-notes-7.17.10.html

7.17.9 Feb 2, 2023 Release notes ↗

securityFixes CVE-2022-38778: A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated user to perform a request that crashes the Kibana server process.

securityFixes CVE-2022-38779: An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL.

otherDownloads: https://elastic.co/downloads/kibana Release notes: https://www.elastic.co/guide/en/kibana/7.17/release-notes-7.17.9.html

7.17.8 Dec 8, 2022 Release notes ↗

otherDownloads: https://elastic.co/downloads/kibana Release notes: https://www.elastic.co/guide/en/kibana/7.17/release-notes-7.17.8.html