Graylog2__graylog2-server_CVE-2023-41044_5-1-2

Graylog 欢迎！ Graylog 是一个开源日志管理平台。 您可以在我们的官方网站上了解更多项目信息，并在文档站点查阅文档。 问题追踪 发现了一个 Bug？有改进的想法？欢迎提交问题。 贡献 帮助我们构建日志管理的未来，并参与到一个每天被成千上万人使用的项目中。 请遵循贡献者指南并阅读贡献说明以开始。 想要获得报酬来开发我们的开源产品？申请我们的职位！ 保持联系 欢迎加入 freenode IRC 上的 graylog 频道、libera 上的 graylog 频道，或在我们的社区论坛中创建话题与我们聊天。 许可证 Graylog 基于 服务器端公共许可证 SSPL 的第 1 版发...

CVE-2023-41044

Graylog is a free and open log management platform. A partial path traversal vulnerability exists in Graylog's Support Bundle feature. The vulnerability is caused by incorrect user input validation in an HTTP API resource. Graylog's Support Bundle feature allows an attacker with valid Admin role...

CVE-2023-41044

Graylog is a free and open log management platform. A partial path traversal vulnerability exists in Graylog's Support Bundle feature. The vulnerability is caused by incorrect user input validation in an HTTP API resource. Graylog's Support Bundle feature allows an attacker with valid Admin role...

CVE-2023-41044

Graylog exposes a partial path traversal vulnerability in its Support Bundle feature (requires valid Admin credentials). The issue stems from improper input validation in an HTTP API resource, allowing reading or deleting files under sibling directories of the support-bundle directory (data_dir d...