Executive brief
Cross-site Scripting in Graylog
Affected products
- Maven org.graylog2:graylog2-server
Junglewise Threat Intelligence
CVE-2018-11651: Cross-site Scripting in Graylog
CVE-2018-11651 · Severity: low · CVSS 3 · Published 2022-05-14
Technologies: org.graylog2:graylog2-server (Maven). Vendors: Maven.
Related threats
- Graylog is a free and open log management platform. From 7.1.0 until 7.1.4 and 7.2.0-alpha.2, the System Catalog entity titles endpoint in g
- Graylog Allows Stored Cross-Site Scripting via Files Plugin and API Browser
- Graylog's Authenticated HTTP inputs ingest message even if Authorization header is missing or has wrong value
- Graylog server has partial path traversal vulnerability in Support Bundle feature
- Cross-site Scripting in Graylog Server