Executive brief
Graylog's Authenticated HTTP inputs ingest message even if Authorization header is missing or has wrong value
Affected products
- Maven org.graylog2:graylog2-server
Junglewise Threat Intelligence
CVE-2025-30373: Graylog's Authenticated HTTP inputs ingest message even if Authorization header is missing or has wrong value
CVE-2025-30373 · Severity: low · CVSS 3.1 · Published 2025-04-07
Technologies: org.graylog2:graylog2-server (Maven). Vendors: Maven.
Related threats
- Graylog is a free and open log management platform. From 7.1.0 until 7.1.4 and 7.2.0-alpha.2, the System Catalog entity titles endpoint in g
- Graylog Allows Stored Cross-Site Scripting via Files Plugin and API Browser
- Graylog server has partial path traversal vulnerability in Support Bundle feature
- Cross-site Scripting in Graylog Server
- Cross-site Scripting in Graylog