Описание
Cross-site Scripting in Graylog
Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names, related to components/dashboard/Dashboard.jsx, components/dashboard/EditDashboardModal.jsx, and pages/ShowDashboardPage.jsx.
Пакеты
Наименование
org.graylog2:graylog2-server
maven
Затронутые версииВерсия исправления
< 2.4.4
2.4.4
Связанные уязвимости
CVSS3: 6.1
nvd
больше 7 лет назад
Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names, related to components/dashboard/Dashboard.jsx, components/dashboard/EditDashboardModal.jsx, and pages/ShowDashboardPage.jsx.
CVSS3: 6.1
debian
больше 7 лет назад
Graylog before v2.4.4 has an XSS security issue with unescaped text in ...