org.graylog.plugins:graylog-plugin-parent (>=6.2.0, <=6.2.3), org.graylog.plugins:graylog-plugin-web-parent (>=6.2.0, <=6.2.3) potentially affected by CVE-2025-53106 via org.graylog2:graylog2-server (>=6.2.0, <=6.2.3)

org.graylog2:graylog2-server MAVEN version =6.2.0, =6.2.0, =6.2.0, =6.2.3 Source cves: CVE-2025-53106 Source advisory: SNYK:JAVA-ORGGRAYLOG2-10571076...

org.graylog.plugins:graylog-plugin-parent (>=6.2.0, <=6.2.3), org.graylog.plugins:graylog-plugin-web-parent (>=6.2.0, <=6.2.3) potentially affected by CVE-2025-53106 via org.graylog2:graylog2-server (>=6.2.0, <=6.2.3)

org.graylog2:graylog2-server MAVEN version =6.2.0, =6.2.0, =6.2.0, =6.2.3 Source cves: CVE-2025-53106 Source advisory: GHSA-3M86-C9X3-VWM9...

Graylog vulnerable to privilege escalation through API tokens

Impact Graylog users can gain elevated privileges by creating and using API tokens for the local Administrator or any other user for whom the malicious user knows the ID. For the attack to succeed, the attacker needs a user account in Graylog. They can then proceed to issue hand-crafted requests ...

Improper Authorization

Overview org.graylog2:graylog2-server is a log management platform. Affected versions of this package are vulnerable to Improper Authorization via an incorrect permission check in the token creation process. An attacker can gain elevated privileges by crafting requests to the REST API and creatin...

GHSA-3M86-C9X3-VWM9 Graylog vulnerable to privilege escalation through API tokens

Impact Graylog users can gain elevated privileges by creating and using API tokens for the local Administrator or any other user for whom the malicious user knows the ID. For the attack to succeed, the attacker needs a user account in Graylog. They can then proceed to issue hand-crafted requests ...

org.graylog.plugins:graylog-plugin-parent (>=6.2.0, <=6.2.3), org.graylog.plugins:graylog-plugin-web-parent (>=6.2.0, <=6.2.3) potentially affected by CVE-2025-53106 via org.graylog2:graylog2-server (>=6.2.0, <=6.2.3)

org.graylog2:graylog2-server MAVEN version =6.2.0, =6.2.0, =6.2.0, =6.2.3 Source cves: CVE-2025-53106 Source advisory: OSV:GHSA-3M86-C9X3-VWM9...

PT-2025-27497 · Graylog · Graylog

Name of the Vulnerable Software and Affected Versions: Graylog versions prior to 6.2.4 Graylog versions prior to 6.3.0-rc.2 Description: A flaw in Graylog allows authenticated users to escalate privileges via API token abuse. This issue can be exploited by creating and using API tokens for the...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=1.1.0, <=2.2.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=1.0.0, <=3.1.1) +96 more potentially affected by CVE-2025-27819 via org.apache.kafka:kafka_2.11 (0.9.0.1)

org.apache.kafka:kafka2.11 MAVEN version 0.9.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kafka:kafka2.11 and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count =1.1.0, =1.0.0, =1.1.0, =1.0.0, =1.0.0...

CVE-2024-52506

Graylog is a free and open log management platform. The reporting functionality in Graylog allows the creation and scheduling of reports which contain dashboard widgets displaying individual log messages or metrics aggregated from fields of multiple log messages. This functionality, as included i...

CVE-2024-24823

Graylog is a free and open log management platform. Starting in version 4.3.0 and prior to versions 5.1.11 and 5.2.4, reauthenticating with an existing session cookie would re-use that session id, even if for different user credentials. In this case, the pre-existing session could be used to gain...

CVE-2023-41041

Graylog is a free and open log management platform. In a multi-node Graylog cluster, after a user has explicitly logged out, a user session may still be used for API requests until it has reached its original expiry time. Each node maintains an in-memory cache of user sessions. Upon a cache-miss,...

CVE-2023-41044

Graylog is a free and open log management platform. A partial path traversal vulnerability exists in Graylog's Support Bundle feature. The vulnerability is caused by incorrect user input validation in an HTTP API resource. Graylog's Support Bundle feature allows an attacker with valid Admin role...

CVE-2023-41045

Graylog is a free and open log management platform. Graylog makes use of only one single source port for DNS queries. Graylog binds a single socket for outgoing DNS queries and while that socket is bound to a random port number it is never changed again. This goes against recommended practice sin...

CVE-2022-29711

LibreNMS v22.3.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /Table/GraylogController.php...

CVE-2021-37760

A Session ID leak in the audit log in Graylog before 4.1.2 allows attackers to escalate privileges to the access level of the leaked session ID...

CVE-2021-37759

A Session ID leak in the DEBUG log file in Graylog before 4.1.2 allows attackers to escalate privileges to the access level of the leaked session ID...

CVE-2020-15813

Graylog before 3.3.3 lacks SSL Certificate Validation for LDAP servers. It allows use of an external user/group database stored in LDAP. The connection configuration allows the usage of unencrypted, SSL- or TLS-secured connections. Unfortunately, the Graylog client code in all versions that suppo...

CVE-2018-11650

Graylog before v2.4.4 has an XSS security issue with unescaped text in notifications, related to toastr and util/UserNotification.js...

CVE-2018-11651

Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names, related to components/dashboard/Dashboard.jsx, components/dashboard/EditDashboardModal.jsx, and pages/ShowDashboardPage.jsx...

CVE-2025-46827

Graylog is a free and open log management platform. Prior to versions 6.0.14, 6.1.10, and 6.2.0, it is possible to obtain user session cookies by submitting an HTML form as part of an Event Definition Remediation Step field. For this attack to succeed, the attacker needs a user account with...