maven

org.graylog2:graylog2-server

16 Total advisories

16 Vulnerabilities

0 Malware

Dependency scanning

Check whether org.graylog2:graylog2-server is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

org.graylog2:graylog2-server

Vulnerabilities

Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards

Graylog Allows Stored Cross-Site Scripting via Files Plugin and API Browser

Graylog vulnerable to instantiation of arbitrary classes triggered by API request

Graylog session fixation vulnerability through cookie injection

Graylog user session is still usable after logout

Graylog server has partial path traversal vulnerability in Support Bundle feature

Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens

Fortigate syslog message parser can be exploited to modify or delete fields from the original message

Graylog Server: System Catalog titles endpoint can be used to retrieve values of protected database fields

Graylog vulnerable to privilege escalation through API tokens

Graylog Allows Session Takeover via Insufficient HTML Sanitization

Graylog's Authenticated HTTP inputs ingest message even if Authorization header is missing or has wrong value

Graylog vulnerable to insecure source port usage for DNS queries

Cross-site Scripting in Graylog Server

Cross-site Scripting in Graylog

Cross-site Scripting in Graylog Server

Browse more Maven advisories

Start Securing