CVE-2024-52973

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Jan 21, 2025

CWE ID 770

Summary

CVE-2024-52973 is a vulnerability affecting Kibana's Observability-Logs feature. A maliciously crafted request to the /api/log_entries/summary endpoint can cause a crash due to an uncontrolled resource allocation. Users with read access to this feature can exploit this vulnerability, potentially leading to service disruptions. The allocation of resources without proper limits or throttling is the root cause of the issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Kibana

Affected Vendors

Elastic

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/0qD0FF
https://www.cve.org/CVERecord?id=CVE-2024-52973
https://nvd.nist.gov/vuln/detail/CVE-2024-52973

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Predator Still Active, with New Client and Corporate Links Identified

Russia-Aligned TAG-110 Targets Tajikistan with Macro-Enabled Word Documents

Measuring the US-China AI Gap

Know What Matters

For Customers

For Partners