Skip to content
OpenAdvisories

Product · Graylog2

graylog2-server

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.7
    CVE-2023-41045

    Insecure source port usage for DNS queries in Graylog

    Graylog is a free and open log management platform. Graylog makes use of only one single source port for DNS queries. Graylog binds a single socket for outgoing DNS queries and while that socket is bound to a random port number it is never changed again. This…

    Graylog2 graylog2-server org.graylog2:graylog2-server Maven
  • Low 3.3
    CVE-2023-41044 Public exploit

    Partial path traversal vulnerability in Support Bundle feature of Graylog

    Graylog is a free and open log management platform. A partial path traversal vulnerability exists in Graylog's `Support Bundle` feature. The vulnerability is caused by incorrect user input validation in an HTTP API resource. Graylog's Support Bundle feature a…

    Graylog2 graylog2-server org.graylog2:graylog2-server Maven
  • Low 2.6
    CVE-2023-41041

    User session is still usable after logout in graylog2-server

    Graylog is a free and open log management platform. In a multi-node Graylog cluster, after a user has explicitly logged out, a user session may still be used for API requests until it has reached its original expiry time. Each node maintains an in-memory cach…

    Graylog2 graylog2-server org.graylog2:graylog2-server Maven