Threats tagged 'bit-kibana-2024-37288'

A deserialization vulnerability in Kibana versions 8.15.0 up to but not including 8.15.1 allows arbitrary code execution when parsing a specially crafted YAML document. This issue specifically affects users of Elastic Security's built-in AI tools who have configured an Amazon Bedrock connector. The vulnerability is critical due to the potential for remote code execution.