CVE-2025-46827

creationtimestamp| type| source ---|---|--- 2025-05-07 16:23:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15347 2025-05-07 16:47:51+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114467567755058452 2025-05-07 18:27:02+00:00| seen|...

CVE-2025-46827

Graylog is a free and open log management platform. Prior to versions 6.0.14, 6.1.10, and 6.2.0, it is possible to obtain user session cookies by submitting an HTML form as part of an Event Definition Remediation Step field. For this attack to succeed, the attacker needs a user account with...

org.graylog.plugins:graylog-plugin-parent (5.1.5), org.graylog.plugins:graylog-plugin-web-parent (5.1.5) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (5.1.5)

org.graylog2:graylog2-server MAVEN version 5.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.1.5 - org.graylog.plugins:graylog-plugin-web-parent 5.1.5...

org.graylog.telemetry:graylog-telemetry-plugin (>=1.0.0-beta.2, <=1.0.0-beta.3) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (1.0.0-beta.3)

org.graylog2:graylog2-server MAVEN version 1.0.0-beta.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.telemetry:graylog-telemetry-plugin =1.0.0-beta.2, =1.0.0-beta.3 Source cves:...

org.graylog.plugins:usage-statistics (>=1.0.3, <=1.0.4) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (1.1.0-beta.3)

org.graylog2:graylog2-server MAVEN version 1.1.0-beta.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics =1.0.3, =1.0.4 Source cves: CVE-2025-46827 Source advisory:...

org.graylog2:graylog2-rest-routes (1.2.0-rc.1) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (1.2.0-rc.1)

org.graylog2:graylog2-server MAVEN version 1.2.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog2:graylog2-rest-routes 1.2.0-rc.1 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-beta.2) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.1.0-beta.2)

org.graylog2:graylog2-server MAVEN version 2.1.0-beta.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-beta.2 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-beta.3) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.1.0-beta.3)

org.graylog2:graylog2-server MAVEN version 2.1.0-beta.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-beta.3 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-beta.4) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.1.0-beta.4)

org.graylog2:graylog2-server MAVEN version 2.1.0-beta.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-beta.4 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-rc.1) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.1.0-rc.1)

org.graylog2:graylog2-server MAVEN version 2.1.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-rc.1 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:graylog-plugin-pipeline-processor (1.1.1), org.graylog.plugins:usage-statistics (2.1.1) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.1.1)

org.graylog2:graylog2-server MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-pipeline-processor 1.1.1 - org.graylog.plugins:usage-statistics 2.1....

org.graylog.plugins:usage-statistics (>=1.1.2, <=2.1.2) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.1.2)

org.graylog2:graylog2-server MAVEN version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics =1.1.2, =2.1.2 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (2.1.3) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.1.3)

org.graylog2:graylog2-server MAVEN version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.3 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:graylog-plugin-parent (2.2.0-alpha.1), org.graylog.plugins:graylog-plugin-web-parent (2.2.0-alpha.1) +1 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.2.0-alpha.1)

org.graylog2:graylog2-server MAVEN version 2.2.0-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.0-alpha.1 -...

org.graylog.plugins:graylog-plugin-parent (2.2.0), org.graylog.plugins:graylog-plugin-pipeline-processor (2.2.0) +2 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.2.0)

org.graylog2:graylog2-server MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.0 - org.graylog.plugins:graylog-plugin-pipeline-processor...

org.graylog.plugins:graylog-plugin-parent (2.3.0-alpha.1), org.graylog.plugins:graylog-plugin-pipeline-processor (2.3.0-alpha.1) +2 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.3.0-alpha.1)

org.graylog2:graylog2-server MAVEN version 2.3.0-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.3.0-alpha.1 -...

org.graylog.plugins:graylog-plugin-parent (2.3.0-beta.1), org.graylog.plugins:graylog-plugin-pipeline-processor (2.3.0-beta.1) +2 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.3.0-beta.1)

org.graylog2:graylog2-server MAVEN version 2.3.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.3.0-beta.1 -...

org.graylog.plugins:graylog-plugin-parent (2.3.0-rc.2), org.graylog.plugins:graylog-plugin-pipeline-processor (2.3.0-rc.2) +2 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.3.0-rc.2)

org.graylog2:graylog2-server MAVEN version 2.3.0-rc.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.3.0-rc.2 -...

org.graylog.plugins:graylog-plugin-parent (2.2.0-alpha.3), org.graylog.plugins:graylog-plugin-web-parent (2.2.0-alpha.3) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.2.0-alpha.3)

org.graylog2:graylog2-server MAVEN version 2.2.0-alpha.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.0-alpha.3 -...

org.graylog.plugins:graylog-plugin-parent (2.2.0-beta.5), org.graylog.plugins:graylog-plugin-pipeline-processor (2.2.0-beta.5) +2 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.2.0-beta.5)

org.graylog2:graylog2-server MAVEN version 2.2.0-beta.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.0-beta.5 -...