Skip to content
OpenAdvisories

Vendor

Graylog2

15 known vulnerabilities.

Products

graylog2-server 15
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2024-24824 Public exploit EPSS 35%

    graylog2-server vulnerable to instantiation of arbitrary classes triggered by API request

    Graylog is a free and open log management platform. Starting in version 2.0.0 and prior to versions 5.1.11 and 5.2.4, arbitrary classes can be loaded and instantiated using a HTTP PUT request to the `/api/system/cluster_config/` endpoint. Graylog's cluster co…

    Graylog2 graylog2-server org.graylog2:graylog2-server Maven
  • Low 3.3
    CVE-2023-41044 Public exploit

    Partial path traversal vulnerability in Support Bundle feature of Graylog

    Graylog is a free and open log management platform. A partial path traversal vulnerability exists in Graylog's `Support Bundle` feature. The vulnerability is caused by incorrect user input validation in an HTTP API resource. Graylog's Support Bundle feature a…

    Graylog2 graylog2-server org.graylog2:graylog2-server Maven