Skip to content
OpenAdvisories

Product · Graylog2

graylog2-server

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-24824 Public exploit EPSS 35%

    graylog2-server vulnerable to instantiation of arbitrary classes triggered by API request

    Graylog is a free and open log management platform. Starting in version 2.0.0 and prior to versions 5.1.11 and 5.2.4, arbitrary classes can be loaded and instantiated using a HTTP PUT request to the `/api/system/cluster_config/` endpoint. Graylog's cluster co…

    Graylog2 graylog2-server org.graylog2:graylog2-server Maven