org.graylog.plugins:graylog-plugin-parent (4.3.1), org.graylog.plugins:graylog-plugin-web-parent (4.3.1) potentially affected by unknown CVE via org.graylog2:graylog2-server (4.3.1)

org.graylog2:graylog2-server MAVEN version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.3.1 - org.graylog.plugins:graylog-plugin-web-parent 4.3.1...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=5.1.0, <=5.1.3), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (>=5.1.0, <=5.1.1) +3 more potentially affected by unknown CVE via org.graylog2:graylog2-server (5.1.3)

org.graylog2:graylog2-server MAVEN version 5.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard =5.1.0, =5.1.0, =5.1.0, =5.1.2 -...

org.graylog.plugins:graylog-plugin-parent (5.2.6), org.graylog.plugins:graylog-plugin-web-parent (5.2.6) potentially affected by unknown CVE via org.graylog2:graylog2-server (5.2.6)

org.graylog2:graylog2-server MAVEN version 5.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.2.6 - org.graylog.plugins:graylog-plugin-web-parent 5.2.6...

org.graylog.telemetry:graylog-telemetry-plugin (>=1.0.0-beta.2, <=1.0.0-beta.3) potentially affected by unknown CVE via org.graylog2:graylog2-server (1.0.0-beta.3)

org.graylog2:graylog2-server MAVEN version 1.0.0-beta.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.telemetry:graylog-telemetry-plugin =1.0.0-beta.2, =1.0.0-beta.3 Source cves: unknown...

GHSA-Q9Q2-3PPX-MWQF Graylog Allows Stored Cross-Site Scripting via Files Plugin and API Browser

Impact Two minor vulnerabilities were identified in the Graylog2 enterprise server, which can be combined to carry out a stored cross-site scripting attack. An attacker with the permission FILESCREATE can exploit these vulnerabilities to upload arbitrary Javascript code to the Graylog2 server,...

org.graylog.plugins:graylog-plugin-parent (2.2.0-beta.3), org.graylog.plugins:graylog-plugin-pipeline-processor (2.2.0-beta.3) +2 more potentially affected by unknown CVE via org.graylog2:graylog2-server (2.2.0-beta.3)

org.graylog2:graylog2-server MAVEN version 2.2.0-beta.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.0-beta.3 -...

org.graylog.plugins:graylog-plugin-parent (2.2.2), org.graylog.plugins:graylog-plugin-pipeline-processor (2.2.2) +2 more potentially affected by unknown CVE via org.graylog2:graylog2-server (2.2.2)

org.graylog2:graylog2-server MAVEN version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.2 - org.graylog.plugins:graylog-plugin-pipeline-processor...

org.graylog.plugins:graylog-plugin-parent (3.1.3), org.graylog.plugins:graylog-plugin-web-parent (3.1.3) potentially affected by unknown CVE via org.graylog2:graylog2-server (3.1.3)

org.graylog2:graylog2-server MAVEN version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 3.1.3 - org.graylog.plugins:graylog-plugin-web-parent 3.1.3...

org.graylog.plugins:graylog-plugin-parent (3.1.0-rc.1), org.graylog.plugins:graylog-plugin-web-parent (3.1.0-rc.1) potentially affected by unknown CVE via org.graylog2:graylog2-server (3.1.0-rc.1)

org.graylog2:graylog2-server MAVEN version 3.1.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 3.1.0-rc.1 - org.graylog.plugins:graylog-plugin-web-pare...

org.graylog.plugins:graylog-plugin-parent (4.2.11), org.graylog.plugins:graylog-plugin-web-parent (4.2.11) potentially affected by unknown CVE via org.graylog2:graylog2-server (4.2.11)

org.graylog2:graylog2-server MAVEN version 4.2.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.2.11 - org.graylog.plugins:graylog-plugin-web-parent 4.2.1...

org.graylog.plugins:graylog-plugin-parent (5.0.7), org.graylog.plugins:graylog-plugin-web-parent (5.0.7) potentially affected by unknown CVE via org.graylog2:graylog2-server (5.0.7)

org.graylog2:graylog2-server MAVEN version 5.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.0.7 - org.graylog.plugins:graylog-plugin-web-parent 5.0.7...

org.graylog.plugins:graylog-plugin-parent (5.1.10), org.graylog.plugins:graylog-plugin-web-parent (5.1.10) potentially affected by unknown CVE via org.graylog2:graylog2-server (5.1.10)

org.graylog2:graylog2-server MAVEN version 5.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.1.10 - org.graylog.plugins:graylog-plugin-web-parent 5.1.1...

Cross-site Scripting (XSS)

Overview org.graylog2:graylog2-server is a log management platform. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the plugins and API Browser. An attacker with the FILESCREATE permission can upload and execute arbitrary Javascript, leading to unauthorized action...

Graylog Allows Stored Cross-Site Scripting via Files Plugin and API Browser

Impact Two minor vulnerabilities were identified in the Graylog2 enterprise server, which can be combined to carry out a stored cross-site scripting attack. An attacker with the permission FILESCREATE can exploit these vulnerabilities to upload arbitrary Javascript code to the Graylog2 server,...

org.graylog.plugins:graylog-plugin-parent (3.0.0-alpha.1), org.graylog.plugins:graylog-plugin-web-parent (3.0.0-alpha.1) potentially affected by unknown CVE via org.graylog2:graylog2-server (3.0.0-alpha.1)

org.graylog2:graylog2-server MAVEN version 3.0.0-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 3.0.0-alpha.1 -...

org.graylog.plugins:graylog-plugin-parent (4.1.12), org.graylog.plugins:graylog-plugin-web-parent (4.1.12) potentially affected by unknown CVE via org.graylog2:graylog2-server (4.1.12)

org.graylog2:graylog2-server MAVEN version 4.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.1.12 - org.graylog.plugins:graylog-plugin-web-parent 4.1.1...

org.graylog.plugins:graylog-plugin-parent (4.3.3), org.graylog.plugins:graylog-plugin-web-parent (4.3.3) potentially affected by unknown CVE via org.graylog2:graylog2-server (4.3.3)

org.graylog2:graylog2-server MAVEN version 4.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.3.3 - org.graylog.plugins:graylog-plugin-web-parent 4.3.3...

org.graylog.plugins:graylog-plugin-parent (4.3.12), org.graylog.plugins:graylog-plugin-web-parent (4.3.12) potentially affected by unknown CVE via org.graylog2:graylog2-server (4.3.12)

org.graylog2:graylog2-server MAVEN version 4.3.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.3.12 - org.graylog.plugins:graylog-plugin-web-parent 4.3.1...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (2.0.0-beta.1), org.graylog.plugins:graylog-plugin-parent (3.2.3) +1 more potentially affected by unknown CVE via org.graylog2:graylog2-server (3.2.3)

org.graylog2:graylog2-server MAVEN version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count 2.0.0-beta.1 -...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.0.0, <=6.1.7), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (>=6.0.0, <=6.1.0) +3 more potentially affected by unknown CVE via org.graylog2:graylog2-server (>=6.0.0, <=6.1.16)

org.graylog2:graylog2-server MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.1.16 Source cves: unknown CVE Source advisory: SNYK:JAVA-ORGGRAYLOG2-10121303...