8 matches found
WS-2019-0218
graylog-web-interface all versions are vulnerable to XSS when it fails to escape output on the TypeAhead and QueryInput components, which may allow attackers to execute arbitrary JavaScript on the victim's browser...
Cross-site Scripting in Graylog Server
In Graylog before 2.4.6, XSS was possible in typeahead components, related to components/common/TypeAheadInput.jsx and components/search/QueryInput.ts...
GHSA-38HF-XJMX-JRH8 Cross-site Scripting in Graylog Server
In Graylog before 2.4.6, XSS was possible in typeahead components, related to components/common/TypeAheadInput.jsx and components/search/QueryInput.ts...
Cross-Site Scripting in graylog-web-interface
All versions of graylog-web-interface are vulnerable to Cross-Site Scripting XSS. The package fails to escape output on the TypeAhead and QueryInput components, which may allow attackers to execute arbitrary JavaScript on the victim's browser. Recommendation No fix is currently available. Conside...
GHSA-9QGH-7PGP-HP7R Cross-Site Scripting in graylog-web-interface
All versions of graylog-web-interface are vulnerable to Cross-Site Scripting XSS. The package fails to escape output on the TypeAhead and QueryInput components, which may allow attackers to execute arbitrary JavaScript on the victim's browser. Recommendation No fix is currently available. Conside...
PT-2020-21205
Name of the Vulnerable Software and Affected Versions graylog-web-interface versions all versions Description The issue concerns a failure to escape output on the TypeAhead and QueryInput components, potentially allowing attackers to execute arbitrary JavaScript on the victim's browser through...
