org.graylog.plugins:graylog-plugin-parent (>=5.1.0, <=5.1.2), org.graylog.plugins:graylog-plugin-web-parent (>=5.1.0, <=5.1.2) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (>=5.1.0, <=5.1.2)

org.graylog2:graylog2-server MAVEN version =5.1.0, =5.1.0, =5.1.0, =5.1.2 Source cves: CVE-2023-41045 Source advisory: MEND:CVE-2023-41045...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=1.1.0, <=4.1.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=1.0.0, <=5.0.0) +12 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (>=1.0.0-beta.3, <=5.0.8)

org.graylog2:graylog2-server MAVEN version =1.0.0-beta.3, =1.1.0, =1.0.0, =1.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1, =2.2.0-alpha.1, =1.1.0, =2.2.0-beta.1, =2.2.0-alpha.1, =1.0.3, =1.0.0-beta.2, =1.2.0-rc.1, =1.3.4 Source cves: CVE-2023-41045 Source advisory: MEND:CVE-2023-41045...

DNS Cache Poisoning

graylog2-server is vulnerable to DNS Cache Poisoning. The vulnerability exists because the library uses a single source port for DNS queries, leading to cache poisoning attacks...

Session Fixation

graylog2-server is vulnerable to Session Fixation. The vulnerability exists because a node may still have the session cached even when a user has explicitly logged out, which allows the session to still be used for API requests until it has reached its original expiry time...

org.graylog.plugins:graylog-plugin-parent (>=5.1.0, <=5.1.2), org.graylog.plugins:graylog-plugin-web-parent (>=5.1.0, <=5.1.2) potentially affected by CVE-2023-41044 via org.graylog2:graylog2-server (>=5.1.0, <=5.1.2)

org.graylog2:graylog2-server MAVEN version =5.1.0, =5.1.0, =5.1.0, =5.1.2 Source cves: CVE-2023-41044 Source advisory: GHSA-2Q4P-F6GF-MQR5...

org.graylog.plugins:graylog-plugin-parent (>=5.1.0, <=5.1.2), org.graylog.plugins:graylog-plugin-web-parent (>=5.1.0, <=5.1.2) potentially affected by CVE-2023-41044 via org.graylog2:graylog2-server (>=5.1.0, <=5.1.2)

org.graylog2:graylog2-server MAVEN version =5.1.0, =5.1.0, =5.1.0, =5.1.2 Source cves: CVE-2023-41044 Source advisory: OSV:GHSA-2Q4P-F6GF-MQR5...

org.graylog.plugins:graylog-plugin-parent (4.3.12), org.graylog.plugins:graylog-plugin-web-parent (4.3.12) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.3.12)

org.graylog2:graylog2-server MAVEN version 4.3.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.3.12 - org.graylog.plugins:graylog-plugin-web-parent 4.3.1...

org.graylog.plugins:graylog-plugin-parent (3.3.7), org.graylog.plugins:graylog-plugin-web-parent (3.3.7) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (3.3.7)

org.graylog2:graylog2-server MAVEN version 3.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 3.3.7 - org.graylog.plugins:graylog-plugin-web-parent 3.3.7...

org.graylog.plugins:graylog-plugin-parent (3.1.0-rc.1), org.graylog.plugins:graylog-plugin-web-parent (3.1.0-rc.1) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (3.1.0-rc.1)

org.graylog2:graylog2-server MAVEN version 3.1.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 3.1.0-rc.1 - org.graylog.plugins:graylog-plugin-web-pare...

org.graylog.plugins:graylog-plugin-parent (4.2.8), org.graylog.plugins:graylog-plugin-web-parent (4.2.8) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.2.8)

org.graylog2:graylog2-server MAVEN version 4.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.2.8 - org.graylog.plugins:graylog-plugin-web-parent 4.2.8...

org.graylog.plugins:graylog-plugin-parent (4.0.8), org.graylog.plugins:graylog-plugin-web-parent (4.0.8) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.0.8)

org.graylog2:graylog2-server MAVEN version 4.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.0.8 - org.graylog.plugins:graylog-plugin-web-parent 4.0.8...

org.graylog.plugins:graylog-plugin-parent (4.1.1), org.graylog.plugins:graylog-plugin-web-parent (4.1.1) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.1.1)

org.graylog2:graylog2-server MAVEN version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.1.1 - org.graylog.plugins:graylog-plugin-web-parent 4.1.1...

org.graylog.plugins:graylog-plugin-parent (4.3.11), org.graylog.plugins:graylog-plugin-web-parent (4.3.11) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.3.11)

org.graylog2:graylog2-server MAVEN version 4.3.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.3.11 - org.graylog.plugins:graylog-plugin-web-parent 4.3.1...

org.graylog.plugins:graylog-plugin-parent (2.4.0-alpha.2), org.graylog.plugins:graylog-plugin-pipeline-processor (2.4.0-alpha.2) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.4.0-alpha.2)

org.graylog2:graylog2-server MAVEN version 2.4.0-alpha.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.4.0-alpha.2 -...

org.graylog.plugins:graylog-plugin-parent (4.2.5), org.graylog.plugins:graylog-plugin-web-parent (4.2.5) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.2.5)

org.graylog2:graylog2-server MAVEN version 4.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.2.5 - org.graylog.plugins:graylog-plugin-web-parent 4.2.5...

org.graylog.plugins:graylog-plugin-parent (4.3.10), org.graylog.plugins:graylog-plugin-web-parent (4.3.10) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.3.10)

org.graylog2:graylog2-server MAVEN version 4.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.3.10 - org.graylog.plugins:graylog-plugin-web-parent 4.3.1...

com.github.exabrial:graylog-plugin-openwire (>=1.3.0, <=1.3.1), org.graylog.plugins:graylog-plugin-parent (3.1.4) +1 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (3.1.4)

org.graylog2:graylog2-server MAVEN version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.github.exabrial:graylog-plugin-openwire =1.3.0, =1.3.1 - org.graylog.plugins:graylog-plugin-parent...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (1.0.0), com.airbus-cyber-security.graylog:graylog-plugin-logging-alert (>=1.0.0, <=1.0.1) +4 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.4.3)

org.graylog2:graylog2-server MAVEN version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard 1.0.0 -...

org.graylog.plugins:usage-statistics (2.0.0-beta.2) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.0.0-beta.2)

org.graylog2:graylog2-server MAVEN version 2.0.0-beta.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-beta.2 Source cves: CVE-2023-41045 Source advisory:...

org.graylog.plugins:graylog-plugin-parent (4.2.11), org.graylog.plugins:graylog-plugin-web-parent (4.2.11) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.2.11)

org.graylog2:graylog2-server MAVEN version 4.2.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.2.11 - org.graylog.plugins:graylog-plugin-web-parent 4.2.1...