GHSA-VGGM-3478-VM5M Graylog concurrent PDF report rendering can leak other users' reports

Impact The reporting functionality in Graylog allows the creation and scheduling of reports which contain dashboard widgets displaying individual log messages or metrics aggregated from fields of multiple log messages. This functionality, as included in Graylog 6.1.0 & 6.1.1, is vulnerable to...

Graylog information leakage vulnerability

Graylog is a centralized log management solution from the American company Graylog. The product supports capturing, storing, and analyzing logs in real time, among other things. An information disclosure vulnerability exists in Graylog versions 6.1.0 and 6.1.1, which stems from the reporting...

CVE-2024-52506: Exposure of Sensitive Information to an Unauthorized Actor

Graylog is a free and open log management platform. The reporting functionality in Graylog allows the creation and scheduling of reports which contain dashboard widgets displaying individual log messages or metrics aggregated from fields of multiple log messages. This functionality, as included i...

PT-2024-35346

Name of the Vulnerable Software and Affected Versions Graylog versions 6.1.0 through 6.1.1 Description Graylog is a log management platform. The reporting functionality allows the creation and scheduling of reports containing dashboard widgets displaying log messages or aggregated metrics. A flaw...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=1.2.0, <=2.2.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=3.0.0, <=3.1.1) +32 more potentially affected by CVE-2023-49921 via org.elasticsearch:elasticsearch (5.6.12)

org.elasticsearch:elasticsearch MAVEN version 5.6.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count =1.2.0, =3.0.0, =1.2.0, =1.0....

Graylog Authorization Issues Vulnerability

Graylog is a centralized log management solution from Graylog USA. The product supports capturing, storing and analyzing logs in real time, among other things. Graylog has an authorization issue vulnerability that stems from the presence of a cookie injection vulnerability. A remote attacker coul...

Session Fixation

org.graylog2:graylog2-server is vulnerable to Session Fixation. The vulnerability is due to missing token checks when authentication is performed with an existing session id. Pre-existing session can be used to gain elevated access to an existing session, provided the attacker is able to inject a...

Arbitrary Code Execution

Graylog is vulnerable to Arbitrary Code Execution. The vulnerability is due to a lack of class validation, which allows an attacker to send a HTTP PUT request to the /api/system/clusterconfig/ endpoint which results in the loading of arbitrary classes. This issue can be exploited by an attacker b...

org.graylog.plugins:graylog-plugin-parent (>=5.2.0-alpha.1, <=5.2.3), org.graylog.plugins:graylog-plugin-web-parent (>=5.2.0-alpha.1, <=5.2.3) potentially affected by CVE-2024-24823 via org.graylog2:graylog2-server (>=5.2.0-alpha.1, <=5.2.3)

org.graylog2:graylog2-server MAVEN version =5.2.0-alpha.1, =5.2.0-alpha.1, =5.2.0-alpha.1, =5.2.3 Source cves: CVE-2024-24823 Source advisory: GHSA-3XF8-G8GR-G7RH...

org.graylog.plugins:graylog-plugin-parent (>=5.2.0-alpha.1, <=5.2.3), org.graylog.plugins:graylog-plugin-web-parent (>=5.2.0-alpha.1, <=5.2.3) potentially affected by CVE-2024-24823 via org.graylog2:graylog2-server (>=5.2.0-alpha.1, <=5.2.3)

org.graylog2:graylog2-server MAVEN version =5.2.0-alpha.1, =5.2.0-alpha.1, =5.2.0-alpha.1, =5.2.3 Source cves: CVE-2024-24823 Source advisory: OSV:GHSA-3XF8-G8GR-G7RH...

Graylog session fixation vulnerability through cookie injection

Impact Reauthenticating with an existing session cookie would re-use that session id, even if for different user credentials. In this case, the pre-existing session could be used to gain elevated access to an existing Graylog login session, provided the malicious user could successfully inject...

GHSA-3XF8-G8GR-G7RH Graylog session fixation vulnerability through cookie injection

Impact Reauthenticating with an existing session cookie would re-use that session id, even if for different user credentials. In this case, the pre-existing session could be used to gain elevated access to an existing Graylog login session, provided the malicious user could successfully inject...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=4.4.0, <=5.2.1), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (>=4.2.0, <=5.1.3) +4 more potentially affected by CVE-2024-24823 via org.graylog2:graylog2-server (>=4.3.0, <=5.1.10)

org.graylog2:graylog2-server MAVEN version =4.3.0, =4.4.0, =4.2.0, =4.2.0, =2.0.0, =4.3.0, =4.3.0, =5.1.10 Source cves: CVE-2024-24823 Source advisory: OSV:GHSA-3XF8-G8GR-G7RH...

GHSA-P6GG-5HF4-4RGJ Graylog vulnerable to instantiation of arbitrary classes triggered by API request

Summary Arbitrary classes can be loaded and instantiated using a HTTP PUT request to the /api/system/clusterconfig/ endpoint. Details Graylog's cluster config system uses fully qualified class names as config keys. To validate the existence of the requested class before using them, Graylog loads...

Graylog vulnerable to instantiation of arbitrary classes triggered by API request

Summary Arbitrary classes can be loaded and instantiated using a HTTP PUT request to the /api/system/clusterconfig/ endpoint. Details Graylog's cluster config system uses fully qualified class names as config keys. To validate the existence of the requested class before using them, Graylog loads...

org.graylog.plugins:graylog-plugin-parent (>=5.2.0-alpha.1, <=5.2.3), org.graylog.plugins:graylog-plugin-web-parent (>=5.2.0-alpha.1, <=5.2.3) potentially affected by CVE-2024-24824 via org.graylog2:graylog2-server (>=5.2.0-alpha.1, <=5.2.3)

org.graylog2:graylog2-server MAVEN version =5.2.0-alpha.1, =5.2.0-alpha.1, =5.2.0-alpha.1, =5.2.3 Source cves: CVE-2024-24824 Source advisory: GHSA-P6GG-5HF4-4RGJ...

org.graylog.plugins:graylog-plugin-parent (>=5.2.0-alpha.1, <=5.2.3), org.graylog.plugins:graylog-plugin-web-parent (>=5.2.0-alpha.1, <=5.2.3) potentially affected by CVE-2024-24824 via org.graylog2:graylog2-server (>=5.2.0-alpha.1, <=5.2.3)

org.graylog2:graylog2-server MAVEN version =5.2.0-alpha.1, =5.2.0-alpha.1, =5.2.0-alpha.1, =5.2.3 Source cves: CVE-2024-24824 Source advisory: OSV:GHSA-P6GG-5HF4-4RGJ...

CVE-2024-24824

Graylog is a free and open log management platform. Starting in version 2.0.0 and prior to versions 5.1.11 and 5.2.4, arbitrary classes can be loaded and instantiated using a HTTP PUT request to the /api/system/clusterconfig/ endpoint. Graylog's cluster config system uses fully qualified class...

CVE-2024-24823

Graylog is a free and open log management platform. Starting in version 4.3.0 and prior to versions 5.1.11 and 5.2.4, reauthenticating with an existing session cookie would re-use that session id, even if for different user credentials. In this case, the pre-existing session could be used to gain...

Cross site scripting

Graylog is a free and open log management platform. Starting in version 4.3.0 and prior to versions 5.1.11 and 5.2.4, reauthenticating with an existing session cookie would re-use that session id, even if for different user credentials. In this case, the pre-existing session could be used to gain...