Lucene search

CVE-2024-24824

🗓️ 07 Feb 2024 18:55:15Reported by GoogleType

osv🔗 osv.dev👁 17 Views

Graylog log management platform vulnerability in versions 2.0.0 to 5.2.4 allows arbitrary class instantiation via HTTP PUT request, leading to code execution and information exposur

Reporter	Title	Published	Views	Family All 7
Veracode	Arbitrary Code Execution	8 Feb 202406:45	–	veracode
Prion	Design/Logic Flaw	7 Feb 202418:15	–	prion
OSV	Graylog vulnerable to instantiation of arbitrary classes triggered by API request	7 Feb 202418:23	–	osv
Cvelist	CVE-2024-24824 graylog2-server vulnerable to instantiation of arbitrary classes triggered by API request	7 Feb 202417:25	–	cvelist
NVD	CVE-2024-24824	7 Feb 202418:15	–	nvd
CVE	CVE-2024-24824	7 Feb 202418:15	–	cve
Github Security Blog	Graylog vulnerable to instantiation of arbitrary classes triggered by API request	7 Feb 202418:23	–	github

Source	Link
github	www.github.com/Graylog2/graylog2-server/security/advisories/GHSA-p6gg-5hf4-4rgj
github	www.github.com/Graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8
github	www.github.com/Graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9
github	www.github.com/Graylog2/graylog2-server/blob/e458db8bf4f789d4d19f1b37f0263f910c8d036c/graylog2-server/src/main/java/org/graylog2/rest/resources/system/ClusterConfigResource.java

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

07 Feb 2024 18:15Current

8.8High risk

Vulners AI Score8.8

CVSS38.8

EPSS0.001