Elastic Patches Multiple Vulnerabilities Enabling Arbitrary File Theft and DoS Attacks

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Elastic Addresses Critical Vulnerabilities Enabling File Theft and DoS Attacks Elastic has released critical security updates to address four significant vulnerabilities in its software stack. These vulnerabilities include a high-severity flaw that allows arbitrary file disclosure and could lead to denial-of-service attacks, affecting components like Kibana. The issues stem from file handling, input validation, and resource allocation mechanisms. 3 sources 26