# Kibana 7.17.19 and 8.13.0 Security Update (ESA-2024-47)

**URL:** https://discuss.elastic.co/t/kibana-7-17-19-and-8-13-0-security-update-esa-2024-47/377711
**Category:** Security Announcements
**Created:** [May 1, 2025, 10:15am UTC](https://discuss.elastic.co/t/kibana-7-17-19-and-8-13-0-security-update-esa-2024-47/377711 "2025-05-01T10:15:05Z")
**Posts on this page:** 1
**Showing post:** 1

<div class="post-metadata">

### Author: ![ismisepaul](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ismisepaul/32/102235_2.png) [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)
#### Post date: [May 1, 2025, 10:15am UTC](https://discuss.elastic.co/t/kibana-7-17-19-and-8-13-0-security-update-esa-2024-47/377711/1 "2025-05-01T10:15:05Z")

</div>

**Kibana Unrestricted Upload of File (ESA-2024-47)**

Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation.

**Affected Versions:**  
7.17.0 to 7.17.18 and 8.0.0 to 8.12.3

**Solutions and Mitigations:**  
The issue is resolved in version 7.17.19 or higher, and 8.13.0 or higher.

**Severity:** CVSSv3.1: 4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N  
**CVE ID:** CVE-2025-25016

---

_[View the full topic](https://discuss.elastic.co/t/kibana-7-17-19-and-8-13-0-security-update-esa-2024-47/377711)._