CyberRota Analysis
AI-GeneratedAn insufficiently validated configuration field in Kibana's Cribl integration allows authenticated users with Fleet management privileges to inject malicious expressions into server-side script templates. This vulnerability can lead to unauthorized modifications of Elasticsearch ingest pipelines, potentially compromising data integrity and access controls. Organizations using Kibana with Fleet management capabilities should prioritize remediation to mitigate the risk of exploitation.
Original NVD Description
An insufficiently validated configuration field in Kibana's Cribl integration allows an authenticated user holding Kibana Fleet management privileges to inject attacker-controlled expressions into a server-side script template, resulting in an Elasticsearch ingest pipeline being written beyond the caller's authorized Elasticsearch permissions.