org.graylog2:graylog2-server vulnerabilities (Maven)
16 vulnerabilities.
-
org.graylog2:graylog2-serverMaven Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards 6.3 Medium -
org.graylog2:graylog2-serverMaven Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens 5.3 Medium -
org.graylog2:graylog2-serverMaven Graylog: Fortigate syslog message parser can be exploited to modify or delete fields from the original message 7.5 High -
org.graylog2:graylog2-serverMaven Graylog: System Catalog titles endpoint can be used to retrieve values of protected database fields 5.0 Medium -
org.graylog2:graylog2-serverMaven Graylog vulnerable to privilege escalation through API tokens 8.8 High -
org.graylog2:graylog2-serverMaven Graylog Allows Session Takeover via Insufficient HTML Sanitization 8.0 High -
org.graylog2:graylog2-serverMaven Graylog Allows Stored Cross-Site Scripting via Files Plugin and API Browser 7.3 High -
org.graylog2:graylog2-serverMaven Graylog Authenticated HTTP inputs do ingest message even if Authorization header is missing or has wrong value 6.5 Medium -
org.graylog2:graylog2-serverMaven graylog2-server vulnerable to instantiation of arbitrary classes triggered by API request 8.8 High -
org.graylog2:graylog2-serverMaven graylog2-server Session Fixation vulnerability through cookie injection 5.7 Medium -
org.graylog2:graylog2-serverMaven Partial path traversal vulnerability in Support Bundle feature of Graylog 3.3 Low -
org.graylog2:graylog2-serverMaven Insecure source port usage for DNS queries in Graylog 3.7 Low -
org.graylog2:graylog2-serverMaven User session is still usable after logout in graylog2-server 2.6 Low -
org.graylog2:graylog2-serverMaven Cross-site Scripting in Graylog Server 6.1 Medium -
org.graylog2:graylog2-serverMaven Cross-site Scripting in Graylog 6.1 Medium -
org.graylog2:graylog2-serverMaven Cross-site Scripting in Graylog Server 6.1 Medium