Executive brief
Graylog server has partial path traversal vulnerability in Support Bundle feature
Affected products
- Maven org.graylog2:graylog2-server
Junglewise Threat Intelligence
CVE-2023-41044: Graylog server has partial path traversal vulnerability in Support Bundle feature
CVE-2023-41044 · Severity: low · CVSS 3.1 · Published 2023-07-06
Technologies: org.graylog2:graylog2-server (Maven). Vendors: Maven.
Related threats
- Graylog is a free and open log management platform. From 7.1.0 until 7.1.4 and 7.2.0-alpha.2, the System Catalog entity titles endpoint in g
- Graylog Allows Stored Cross-Site Scripting via Files Plugin and API Browser
- Graylog's Authenticated HTTP inputs ingest message even if Authorization header is missing or has wrong value
- Cross-site Scripting in Graylog Server
- Cross-site Scripting in Graylog