Elastic Addresses Critical Vulnerabilities Enabling File Theft and DoS Attacks

Elastic has released critical security updates to address four significant vulnerabilities in its software stack. These vulnerabilities include a high-severity flaw that allows arbitrary file disclosure and could lead to denial-of-service attacks, affecting components like Kibana. The issues stem from file handling, input validation, and resource allocation mechanisms.