org.graylog.plugins:graylog-plugin-parent (4.2.5), org.graylog.plugins:graylog-plugin-web-parent (4.2.5) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.2.5)

org.graylog2:graylog2-server MAVEN version 4.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.2.5 - org.graylog.plugins:graylog-plugin-web-parent 4.2.5...

org.graylog.plugins:graylog-plugin-parent (3.3.8), org.graylog.plugins:graylog-plugin-web-parent (3.3.8) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (3.3.8)

org.graylog2:graylog2-server MAVEN version 3.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 3.3.8 - org.graylog.plugins:graylog-plugin-web-parent 3.3.8...

org.graylog.plugins:graylog-plugin-parent (4.3.13), org.graylog.plugins:graylog-plugin-web-parent (4.3.13) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.3.13)

org.graylog2:graylog2-server MAVEN version 4.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.3.13 - org.graylog.plugins:graylog-plugin-web-parent 4.3.1...

org.graylog.plugins:graylog-plugin-parent (3.3.13), org.graylog.plugins:graylog-plugin-web-parent (3.3.13) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (3.3.13)

org.graylog2:graylog2-server MAVEN version 3.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 3.3.13 - org.graylog.plugins:graylog-plugin-web-parent 3.3.1...

org.graylog.plugins:graylog-plugin-parent (4.1.3), org.graylog.plugins:graylog-plugin-web-parent (4.1.3) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.1.3)

org.graylog2:graylog2-server MAVEN version 4.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.1.3 - org.graylog.plugins:graylog-plugin-web-parent 4.1.3...

org.graylog.plugins:graylog-plugin-parent (4.1.6), org.graylog.plugins:graylog-plugin-web-parent (4.1.6) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.1.6)

org.graylog2:graylog2-server MAVEN version 4.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.1.6 - org.graylog.plugins:graylog-plugin-web-parent 4.1.6...

org.graylog.plugins:graylog-plugin-parent (2.3.0-alpha.1), org.graylog.plugins:graylog-plugin-pipeline-processor (2.3.0-alpha.1) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.3.0-alpha.1)

org.graylog2:graylog2-server MAVEN version 2.3.0-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.3.0-alpha.1 -...

org.graylog.plugins:graylog-plugin-parent (4.2.2), org.graylog.plugins:graylog-plugin-web-parent (4.2.2) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.2.2)

org.graylog2:graylog2-server MAVEN version 4.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.2.2 - org.graylog.plugins:graylog-plugin-web-parent 4.2.2...

org.graylog.plugins:graylog-plugin-parent (4.0.11), org.graylog.plugins:graylog-plugin-web-parent (4.0.11) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.0.11)

org.graylog2:graylog2-server MAVEN version 4.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.0.11 - org.graylog.plugins:graylog-plugin-web-parent 4.0.1...

org.graylog2:graylog2-rest-routes (1.3.4) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (1.3.4)

org.graylog2:graylog2-server MAVEN version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog2:graylog2-rest-routes 1.3.4 Source cves: CVE-2023-41045 Source advisory:...

org.graylog.plugins:graylog-plugin-parent (4.3.15), org.graylog.plugins:graylog-plugin-web-parent (4.3.15) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.3.15)

org.graylog2:graylog2-server MAVEN version 4.3.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.3.15 - org.graylog.plugins:graylog-plugin-web-parent 4.3.1...

org.graylog.plugins:graylog-plugin-parent (4.0.2), org.graylog.plugins:graylog-plugin-web-parent (4.0.2) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.0.2)

org.graylog2:graylog2-server MAVEN version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.0.2 - org.graylog.plugins:graylog-plugin-web-parent 4.0.2...

org.graylog.plugins:graylog-plugin-parent (4.2.13), org.graylog.plugins:graylog-plugin-web-parent (4.2.13) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.2.13)

org.graylog2:graylog2-server MAVEN version 4.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.2.13 - org.graylog.plugins:graylog-plugin-web-parent 4.2.1...

org.graylog.plugins:graylog-plugin-parent (3.3.3), org.graylog.plugins:graylog-plugin-web-parent (3.3.3) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (3.3.3)

org.graylog2:graylog2-server MAVEN version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 3.3.3 - org.graylog.plugins:graylog-plugin-web-parent 3.3.3...

Graylog user session is still usable after logout

Summary In a multi-node Graylog cluster, after a user has explicitly logged out, a user session may still be used for API requests until it has reached its original expiry time. Details Each node maintains an in-memory cache of user sessions. Upon a cache-miss, the session is loaded from the...

GHSA-3FQM-FRHG-7C85 Graylog user session is still usable after logout

Summary In a multi-node Graylog cluster, after a user has explicitly logged out, a user session may still be used for API requests until it has reached its original expiry time. Details Each node maintains an in-memory cache of user sessions. Upon a cache-miss, the session is loaded from the...

org.graylog.plugins:graylog-plugin-parent (>=5.1.0, <=5.1.2), org.graylog.plugins:graylog-plugin-web-parent (>=5.1.0, <=5.1.2) potentially affected by CVE-2023-41041 via org.graylog2:graylog2-server (>=5.1.0, <=5.1.2)

org.graylog2:graylog2-server MAVEN version =5.1.0, =5.1.0, =5.1.0, =5.1.2 Source cves: CVE-2023-41041 Source advisory: OSV:GHSA-3FQM-FRHG-7C85...

org.graylog.plugins:graylog-plugin-parent (>=5.1.0, <=5.1.2), org.graylog.plugins:graylog-plugin-web-parent (>=5.1.0, <=5.1.2) potentially affected by CVE-2023-41041 via org.graylog2:graylog2-server (>=5.1.0, <=5.1.2)

org.graylog2:graylog2-server MAVEN version =5.1.0, =5.1.0, =5.1.0, =5.1.2 Source cves: CVE-2023-41041 Source advisory: GHSA-3FQM-FRHG-7C85...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=1.1.0, <=4.1.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=1.0.0, <=5.0.0) +12 more potentially affected by CVE-2023-41041 via org.graylog2:graylog2-server (>=1.0.0, <=5.0.8)

org.graylog2:graylog2-server MAVEN version =1.0.0, =1.1.0, =1.0.0, =1.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1, =2.2.0-alpha.1, =1.1.0, =2.2.0-beta.1, =2.2.0-alpha.1, =1.0.3, =1.2.0-rc.1, =1.3.4 Source cves: CVE-2023-41041 Source advisory: OSV:GHSA-3FQM-FRHG-7C85...

PT-2023-27758 · Graylog · Graylog

Name of the Vulnerable Software and Affected Versions: Graylog versions prior to 5.0.9 Graylog versions prior to 5.1.3 Description: Graylog makes use of only one single source port for DNS queries, which goes against recommended practice since 2008, when Dan Kaminsky discovered how easy it is to...