Graylog2__graylog2-server_CVE-2023-41044_5-1-2

Graylog Benvenuto! Graylog è una piattaforma open source per la gestione dei log. Puoi leggere ulteriori informazioni sul progetto sul nostro sito web e consultare la documentazione sul sito di documentazione. Tracciamento dei problemi Hai trovato un bug? Hai un'idea per un miglioramento? Sentiti...

CVE-2023-41044

Graylog is a free and open log management platform. A partial path traversal vulnerability exists in Graylog's Support Bundle feature. The vulnerability is caused by incorrect user input validation in an HTTP API resource. Graylog's Support Bundle feature allows an attacker with valid Admin role...

CVE-2023-41044

Graylog is a free and open log management platform. A partial path traversal vulnerability exists in Graylog's Support Bundle feature. The vulnerability is caused by incorrect user input validation in an HTTP API resource. Graylog's Support Bundle feature allows an attacker with valid Admin role...

CVE-2023-41044

Graylog exposes a partial path traversal vulnerability in its Support Bundle feature (requires valid Admin credentials). The issue stems from improper input validation in an HTTP API resource, allowing reading or deleting files under sibling directories of the support-bundle directory (data_dir d...