Executive brief
Graylog Allows Stored Cross-Site Scripting via Files Plugin and API Browser
Affected products
- Maven org.graylog2:graylog2-server
Junglewise Threat Intelligence
Graylog Allows Stored Cross-Site Scripting via Files Plugin and API Browser
Severity: low · CVSS 3.1 · Published 2025-05-07
Technologies: org.graylog2:graylog2-server (Maven). Vendors: Maven.
Related threats
- Graylog is a free and open log management platform. From 7.1.0 until 7.1.4 and 7.2.0-alpha.2, the System Catalog entity titles endpoint in g
- Graylog's Authenticated HTTP inputs ingest message even if Authorization header is missing or has wrong value
- Graylog server has partial path traversal vulnerability in Support Bundle feature
- Cross-site Scripting in Graylog Server
- Cross-site Scripting in Graylog