CVE-2018-11650

Graylog before v2.4.4 has an XSS security issue with unescaped text in notifications, related to toastr and util/UserNotification.js.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-06-01

Last modified

2024-09-17

Weaknesses

CWE-79

Affected products

• Graylog (Graylog)

References

• https://github.com/Graylog2/graylog2-server/pull/4727
• https://www.graylog.org/post/announcing-graylog-v2-4-4