~ / search / GHSA-h7g4-65mf-6mxh

GHSA-h7g4-65mf-6mxh

Cross-site Scripting in Graylog Server

Source: GitHub Advisory Database (reviewed) Moderate CVE-2018-11650

Packages

EcosystemPackageAffectedFixed in
Maven org.graylog2:graylog2-server < 2.4.4 2.4.4

Details

As written in the advisory (Markdown source, shown as plain text).

Graylog before v2.4.4 has an XSS security issue with unescaped text in notifications, related to toastr and util/UserNotification.js.

References

External links from the advisory. They lead to third-party sites.