org.graylog2:graylog2-server@6.1.1 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the org.graylog2:graylog2-server package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Information Exposure

org.graylog2:graylog2-server is a log management platform.

Affected versions of this package are vulnerable to Information Exposure due to the reuse of a headless browser instance during concurrent report rendering requests. An attacker can access reports intended for other users by initiating multiple concurrent requests at the same start time.

How to fix Information Exposure?

Upgrade org.graylog2:graylog2-server to version 6.1.2 or higher.

[6.1.0,6.1.2)