Skip to content
OpenAdvisories

Package · Maven

org.graylog:graylog-parent

2 known vulnerabilities.

2 results · Feed

  • High 7.1

    Graylog can leak other users' reports via concurrent PDF report rendering

    Graylog is a free and open log management platform. The reporting functionality in Graylog allows the creation and scheduling of reports which contain dashboard widgets displaying individual log messages or metrics aggregated from fields of multiple log messa…

  • High 8.1

    Improper Certificate Validation in Graylog

    Graylog before 3.3.3 lacks SSL Certificate Validation for LDAP servers. It allows use of an external user/group database stored in LDAP. The connection configuration allows the usage of unencrypted, SSL- or TLS-secured connections. Unfortunately, the Graylog …