org.graylog2:graylog2-server@5.2.1 vulnerabilities
latest version
6.1.10
latest non vulnerable version
first published
11 years ago
latest version published
16 days ago
licenses detected
- [4.0.0,)
package registry
Direct Vulnerabilities
Known vulnerabilities in the org.graylog2:graylog2-server package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
org.graylog2:graylog2-server is a log management platform. Affected versions of this package are vulnerable to Session Fixation due to the improper handling of session cookies. An attacker can gain elevated access to an existing login session by injecting their session cookie into another user's browser. This attack requires presenting a spoofed login screen and injecting a session cookie, which is complex and has not been observed in the wild. How to fix Session Fixation? Upgrade | [4.3.0,5.1.11)[5.2.0-alpha.1,5.2.4) |
org.graylog2:graylog2-server is a log management platform. Affected versions of this package are vulnerable to Improper Access Control via the Note: This is only exploitable if the attacker possesses the How to fix Improper Access Control? Upgrade | [2.0.0,5.1.11)[5.2.0-alpha.1,5.2.4) |