CVE-2025-25017
- Source
- https://cve.org/CVERecord?id=CVE-2025-25017
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-25017.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-25017
- Aliases
- Downstream
- Related
- Published
- 2025-10-10T09:53:25.634Z
- Modified
- 2026-07-15T17:25:23.210562Z
- Severity
-
- 8.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N CVSS Calculator
- Summary
- Kibana Stored Cross-Site Scripting (XSS)
- Details
-
Improper Neutralization of Input During Web Page Generation in Kibana can lead to Cross-Site Scripting (XSS)
- Database specific
{ "cwe_ids": [ "CWE-79" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/25xxx/CVE-2025-25017.json", "cna_assigner": "elastic", "unresolved_ranges": [ { "source": "AFFECTED_FIELD", "extracted_events": [ { "introduced": "7.0.0" }, { "last_affected": "7.17.29" }, { "introduced": "8.0.0" }, { "last_affected": "8.18.7" }, { "introduced": "8.19.0" }, { "last_affected": "8.19.3" }, { "introduced": "9.0.0" }, { "last_affected": "9.0.6" }, { "introduced": "9.1.0" }, { "last_affected": "9.1.3" } ] } ] }- References
Affected packages
Git / github.com/elastic/elasticsearch
Affected ranges
- Type
- GIT
- Repo
- https://github.com/elastic/elasticsearch
- Events
-
IntroducedFixedIntroducedFixedIntroducedFixedIntroducedFixed
- Database specific
{ "cpe": "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*", "source": "CPE_RANGE", "extracted_events": [ { "introduced": "7.0.0" }, { "fixed": "8.18.8" }, { "introduced": "8.19.0" }, { "fixed": "8.19.4" }, { "introduced": "9.0.0" }, { "fixed": "9.0.7" }, { "introduced": "9.1.0" }, { "fixed": "9.1.4" } ] }
Affected versions
v8.*
v8.19.0
v8.19.1
v8.19.2
v8.19.3
v9.*
v9.0.0
v9.0.1
v9.0.2
v9.0.3
v9.0.4
v9.0.5
v9.0.6
v9.1.0
v9.1.1
v9.1.2
v9.1.3
Database specific
vanir_signatures_modified
"2026-07-15T17:25:23Z"
vanir_signatures
[
{
"signature_type": "Function",
"target": {
"file": "x-pack/plugin/inference/src/test/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapperTests.java",
"function": "testOldIndexSemanticTextSparseVersionRaisesError"
},
"deprecated": false,
"source": "https://github.com/elastic/elasticsearch/commit/c1310008a98b8bb63c9fc08e763de1d065b943ce",
"id": "CVE-2025-25017-06bcb486",
"signature_version": "v1",
"digest": {
"function_hash": "249765765527764254961865193665008504870",
"length": 322.0
}
},
{
"signature_type": "Function",
"target": {
"file": "x-pack/plugin/inference/src/main/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapper.java",
"function": "validateParserContext"
},
"deprecated": false,
"source": "https://github.com/elastic/elasticsearch/commit/c1310008a98b8bb63c9fc08e763de1d065b943ce",
"id": "CVE-2025-25017-127380f2",
"signature_version": "v1",
"digest": {
"function_hash": "216429141669878661452070393933949020156",
"length": 368.0
}
},
{
"signature_type": "Line",
"target": {
"file": "x-pack/plugin/inference/src/main/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapper.java"
},
"deprecated": false,
"source": "https://github.com/elastic/elasticsearch/commit/c1310008a98b8bb63c9fc08e763de1d065b943ce",
"id": "CVE-2025-25017-19dbbb3d",
"signature_version": "v1",
"digest": {
"line_hashes": [
"46778459678719198788863574446553221226",
"227526389465720929596430553628975697304",
"150049059937223994787476705790433732044",
"328635304086144337324979246151558935664",
"238267326037809942089416424725201504926",
"239127309757472193571684981147742201173",
"173339703316009130346461748428871974340",
"320082339657603852603623259741426538034",
"57118101550255153288139441993827008978",
"268077932521070584832017352121249000075",
"102348567805617495592268951805669974975",
"11265192835822603210162801661360872060",
"201173388829126597956002296588814084345",
"337421580536504805651941451209477653214",
"268075823910593805973861160404908247282",
"9015906786740215991199765650853684422",
"266988922029788668281231447512727939898",
"172758342448755661431055717457301901038",
"297612526677102816987940982488909026806",
"210768804027509774644592109719262626729",
"298123093271431276257578624524763682529",
"80694905765248191373232040858301348148",
"51188739959210038594042089674024249861",
"187947718986999890631599988869822772770",
"207105469192108996997706200474270770510",
"151354268564102146974990964996402402639",
"127423006876670033087290001592727022679",
"275612146089253582203363595104868195677",
"51748493963961357519758086343479074559",
"200549291164040151494825744531332418306",
"239196964213531434344185265450366252390",
"329626261930251612650005244598332413438",
"120105507997745074262955751379832286552",
"34493630395322261406715696382503445314",
"16871879890049855732250965867318795550",
"114692002306916862615727736492928276000",
"215412353412547025196509663532932782715",
"335174381897296512391143356609878691466",
"290996714066872469541389277716815248935",
"333508862785924981954910392220880037432",
"277647464754561137415646796304470856322"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"file": "build-tools-internal/src/main/java/org/elasticsearch/gradle/internal/transport/TransportVersionUpperBound.java",
"function": "fromString"
},
"deprecated": false,
"source": "https://github.com/elastic/elasticsearch/commit/0b7fe68d2e369469ff9e9f344ab6df64ab9c5293",
"id": "CVE-2025-25017-243d03ea",
"signature_version": "v1",
"digest": {
"function_hash": "212016229126902652735871046863928871995",
"length": 508.0
}
},
{
"signature_type": "Function",
"target": {
"file": "server/src/test/java/org/elasticsearch/index/mapper/vectors/DenseVectorFieldMapperTests.java",
"function": "indexMapping"
},
"deprecated": false,
"source": "https://github.com/elastic/elasticsearch/commit/c1310008a98b8bb63c9fc08e763de1d065b943ce",
"id": "CVE-2025-25017-28ff1259",
"signature_version": "v1",
"digest": {
"function_hash": "282459297521231248024296681023376889457",
"length": 1043.0
}
},
{
"signature_type": "Line",
"target": {
"file": "server/src/test/java/org/elasticsearch/index/mapper/vectors/DenseVectorFieldMapperTests.java"
},
"deprecated": false,
"source": "https://github.com/elastic/elasticsearch/commit/c1310008a98b8bb63c9fc08e763de1d065b943ce",
"id": "CVE-2025-25017-4975358e",
"signature_version": "v1",
"digest": {
"line_hashes": [
"262236121079915436119142065679252180905",
"137777506514668796492329693710738707556",
"57564652145248143655886175705483546543",
"114140632291519758601195886058306622434",
"206061497615943989835368704148231563482",
"123974211637094905911105515844484307346",
"202035863791723906355035462524171464328",
"263579734941057405031723276015520724794"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"file": "build-tools-internal/src/main/java/org/elasticsearch/gradle/internal/transport/TransportVersionReferencesPlugin.java",
"function": "apply"
},
"deprecated": false,
"source": "https://github.com/elastic/elasticsearch/commit/c6d8fb31b39450a223671e79141dd1c4b2759b5f",
"id": "CVE-2025-25017-4a97e218",
"signature_version": "v1",
"digest": {
"function_hash": "90354206690606672738628107256158742437",
"length": 1389.0
}
},
{
"signature_type": "Function",
"target": {
"file": "x-pack/plugin/inference/src/main/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapper.java",
"function": "createEmbeddingsField"
},
"deprecated": false,
"source": "https://github.com/elastic/elasticsearch/commit/c1310008a98b8bb63c9fc08e763de1d065b943ce",
"id": "CVE-2025-25017-5412173f",
"signature_version": "v1",
"digest": {
"function_hash": "151581543923528670693525823811555113136",
"length": 1017.0
}
},
{
"signature_type": "Function",
"target": {
"file": "x-pack/plugin/inference/src/test/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapperTests.java",
"function": "testOldIndexSemanticTextDenseVectorRaisesError"
},
"deprecated": false,
"source": "https://github.com/elastic/elasticsearch/commit/c1310008a98b8bb63c9fc08e763de1d065b943ce",
"id": "CVE-2025-25017-5ad383b0",
"signature_version": "v1",
"digest": {
"function_hash": "255075628869125026499779058897594092053",
"length": 474.0
}
},
{
"signature_type": "Line",
"target": {
"file": "x-pack/plugin/inference/src/test/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapperTests.java"
},
"deprecated": false,
"source": "https://github.com/elastic/elasticsearch/commit/c1310008a98b8bb63c9fc08e763de1d065b943ce",
"id": "CVE-2025-25017-64cf6848",
"signature_version": "v1",
"digest": {
"line_hashes": [
"158605217801375928217441734668045540378",
"272643381640331013499760342031064134020",
"53985671753460806937762457046134928512",
"197421975884843474782424751932224498632",
"147776267001273472201702975582528497363",
"655409951843218362925480034532671518",
"17637815016842550146136423455960159478",
"74236008148083372658918307439668483975",
"322466091450047313375256476185595762444",
"19774709324117963877378806154921988126",
"111332465234007377841077556799200761214",
"318852455395922762541962253784569936542",
"103714126231198070777385075505723872779",
"225055423574406139145017039407710500808",
"176602979872018362860366352636239272391",
"331685485893499033920803751727008752008",
"69845433180568037910725362514896432747",
"288232291348711926876643238346416986777",
"68055421170270233796912105902769502524",
"94739273273727563438676562800551104982",
"84737812370821697998231739337299621986",
"115294157346707483202906366071384113569",
"57212282134168748289652182660041201662",
"254952007036070415382532317368308133681",
"263203763916969629460590396437502289108",
"22319423814347326997056951711072005097",
"23504183291184894397124342894633566955",
"218290195268039007322983453577677478937",
"104397057306458966946420455493521049587",
"108549254030958920501876829102082088797",
"103602840545713796434731913178477290736",
"288232291348711926876643238346416986777",
"304973740810181194951592487929339496300",
"130999337670170096176664372274476384929",
"35867540676817589760895459391085052904",
"207502979453752030282883390595778036424",
"201606209583253241599127378006426619079",
"196859472990790294633289504047629811096",
"217941806944909312076984301808225946554",
"262692938943554161674911701383004754029",
"122608929037810719115677381049195131198",
"266704451184192508078195140547635007709",
"42779409025487380885093343877669921094",
"113544207510783995041866812883656149640",
"300270315494799500913741421782448457144",
"186309500865517495853234544968794613882",
"275404729970474416383790431094378410325",
"52682000639465385863593790108573768318",
"108301057757930837241470507337700244957",
"8869584976956833588688363116094065733",
"320322203024487798382973062775163554140"
],
"threshold": 0.9
}
},
{
"signature_type": "Line",
"target": {
"file": "build-tools-internal/src/main/java/org/elasticsearch/gradle/internal/transport/TransportVersionDefinition.java"
},
"deprecated": false,
"source": "https://github.com/elastic/elasticsearch/commit/0b7fe68d2e369469ff9e9f344ab6df64ab9c5293",
"id": "CVE-2025-25017-6503cb05",
"signature_version": "v1",
"digest": {
"line_hashes": [
"217672349542836363100054717812710106049",
"252309572775993669670143339736835705616",
"54091541884137430139822069878767980282",
"107514442387382727071238824310025206689",
"111005771544418714502627678567496956740"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"file": "x-pack/plugin/inference/src/test/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapperTests.java",
"function": "boostNotAllowedIndexVersion"
},
"deprecated": false,
"source": "https://github.com/elastic/elasticsearch/commit/c1310008a98b8bb63c9fc08e763de1d065b943ce",
"id": "CVE-2025-25017-69fd1bb4",
"signature_version": "v1",
"digest": {
"function_hash": "304099916769792469380869096030645339333",
"length": 65.0
}
},
{
"signature_type": "Function",
"target": {
"file": "x-pack/plugin/inference/src/main/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapper.java",
"function": "parseSemanticTextField"
},
"deprecated": false,
"source": "https://github.com/elastic/elasticsearch/commit/c1310008a98b8bb63c9fc08e763de1d065b943ce",
"id": "CVE-2025-25017-76e75111",
"signature_version": "v1",
"digest": {
"function_hash": "185620469528429678572919397230684044211",
"length": 494.0
}
},
{
"signature_type": "Function",
"target": {
"file": "x-pack/plugin/inference/src/test/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapperTests.java",
"function": "testOldIndexSemanticTextMinimalMappingRaisesError"
},
"deprecated": false,
"source": "https://github.com/elastic/elasticsearch/commit/c1310008a98b8bb63c9fc08e763de1d065b943ce",
"id": "CVE-2025-25017-77569fab",
"signature_version": "v1",
"digest": {
"function_hash": "331323253558194736856864026167107843654",
"length": 126.0
}
},
{
"signature_type": "Line",
"target": {
"file": "build-tools-internal/src/main/java/org/elasticsearch/gradle/internal/transport/TransportVersionUpperBound.java"
},
"deprecated": false,
"source": "https://github.com/elastic/elasticsearch/commit/0b7fe68d2e369469ff9e9f344ab6df64ab9c5293",
"id": "CVE-2025-25017-7fcef6d9",
"signature_version": "v1",
"digest": {
"line_hashes": [
"139962615708899532931476526299928016888",
"126012236464058294405097823268518027751",
"289303983905263332908242656297363008578",
"106190180500815641575834140526701597639"
],
"threshold": 0.9
}
},
{
"signature_type": "Line",
"target": {
"file": "build-tools-internal/src/main/java/org/elasticsearch/gradle/internal/transport/TransportVersionResourcesPlugin.java"
},
"deprecated": false,
"source": "https://github.com/elastic/elasticsearch/commit/c6d8fb31b39450a223671e79141dd1c4b2759b5f",
"id": "CVE-2025-25017-8cb88803",
"signature_version": "v1",
"digest": {
"line_hashes": [
"17047697132091523167696546037502393114",
"186998624783687865062194776846591917407",
"313925496811474694517599806095265053507",
"43591908161988811249636983155384315144",
"51362330270681278222633334666757188965",
"6434747799091991094916765659969833820",
"257596224557044121426596031748525730356",
"34971271636189503506429037745419631991",
"7886278914795505251423687570192034958",
"174686354109383981922384148706055248694",
"31761369374311658025302373061685049890",
"31328752844814563230649231401000983729"
],
"threshold": 0.9
}
},
{
"signature_type": "Line",
"target": {
"file": "build-tools-internal/src/main/java/org/elasticsearch/gradle/internal/transport/TransportVersionReferencesPlugin.java"
},
"deprecated": false,
"source": "https://github.com/elastic/elasticsearch/commit/c6d8fb31b39450a223671e79141dd1c4b2759b5f",
"id": "CVE-2025-25017-b0085fac",
"signature_version": "v1",
"digest": {
"line_hashes": [
"180551254947792262872544340034400293557",
"264027860764397316031573051019266933081",
"44151976838782051178779290326798000534",
"73731157910129633539158313046062642474",
"204442736025042855938210968475903219240",
"141958569979963664316519408297393523341",
"252038306184163585631326145345940508203",
"217660552227507015573164445141036982368",
"193224483228772424298542276983865386285"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"file": "x-pack/plugin/inference/src/test/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapperTests.java",
"function": "assertOldIndexUnsupported"
},
"deprecated": false,
"source": "https://github.com/elastic/elasticsearch/commit/c1310008a98b8bb63c9fc08e763de1d065b943ce",
"id": "CVE-2025-25017-bac55aa9",
"signature_version": "v1",
"digest": {
"function_hash": "192095868591587962532804350088891814436",
"length": 331.0
}
},
{
"signature_type": "Function",
"target": {
"file": "build-tools-internal/src/main/java/org/elasticsearch/gradle/internal/transport/TransportVersionResourcesPlugin.java",
"function": "apply"
},
"deprecated": false,
"source": "https://github.com/elastic/elasticsearch/commit/c6d8fb31b39450a223671e79141dd1c4b2759b5f",
"id": "CVE-2025-25017-d8162ddd",
"signature_version": "v1",
"digest": {
"function_hash": "314578485495703872768095023722097166579",
"length": 3053.0
}
},
{
"signature_type": "Function",
"target": {
"file": "build-tools-internal/src/main/java/org/elasticsearch/gradle/internal/transport/TransportVersionDefinition.java",
"function": "fromString"
},
"deprecated": false,
"source": "https://github.com/elastic/elasticsearch/commit/0b7fe68d2e369469ff9e9f344ab6df64ab9c5293",
"id": "CVE-2025-25017-ff0f556b",
"signature_version": "v1",
"digest": {
"function_hash": "338183758137292559670795857535155821477",
"length": 537.0
}
}
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-25017.json"
Git / github.com/elastic/kibana
Affected ranges
- Type
- GIT
- Repo
- https://github.com/elastic/kibana
- Events
-
IntroducedFixedIntroducedFixedIntroducedFixedIntroducedFixed
- Database specific
{ "cpe": "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*", "source": "CPE_RANGE", "extracted_events": [ { "introduced": "7.0.0" }, { "fixed": "8.18.8" }, { "introduced": "8.19.0" }, { "fixed": "8.19.4" }, { "introduced": "9.0.0" }, { "fixed": "9.0.7" }, { "introduced": "9.1.0" }, { "fixed": "9.1.4" } ] }