CVE-2024-52972

CVE-2024-52972 affects Kibana: an allocation of resources without limits or throttling can cause a crash via a specially crafted request to /api/metrics/snapshot. The issue is exploitable by users with read access to Observability Metrics or Logs in Kibana. Connected sources corroborate the same ...