CVE-2021-22139

Name of the Vulnerable Software and Affected Versions: Kibana versions prior to 7.12.1

Description: A denial of service issue was found in the webhook actions due to a lack of timeout or a limit on the request size. An attacker with permissions to create webhook actions could drain the Kibana host connection pool, making Kibana unavailable for all other users.

Recommendations: For versions prior to 7.12.1, update to version 7.12.1 or later to resolve the issue. As a temporary workaround, consider restricting access to create webhook actions to minimize the risk of exploitation.