Описание
Cross-site Scripting in Graylog Server
Graylog before v2.4.4 has an XSS security issue with unescaped text in notifications, related to toastr and util/UserNotification.js.
Пакеты
Наименование
org.graylog2:graylog2-server
maven
Затронутые версииВерсия исправления
< 2.4.4
2.4.4
Связанные уязвимости
CVSS3: 6.1
nvd
больше 7 лет назад
Graylog before v2.4.4 has an XSS security issue with unescaped text in notifications, related to toastr and util/UserNotification.js.
CVSS3: 6.1
debian
больше 7 лет назад
Graylog before v2.4.4 has an XSS security issue with unescaped text in ...