CVE-2018-14380

4.3

MEDIUMCVSS v2

Published

July 18, 2018

Affected

3 projects

Assigned by

MITRE

Severity scale

010

Description

In Graylog before 2.4.6, XSS was possible in typeahead components, related to components/common/TypeAheadInput.jsx and components/search/QueryInput.ts.

Graylog2/graylog2-server

GitHubFree and open log management

NVD

graylog/graylog

Docker HubOfficial Graylog Docker image (automated build)

< 2.4.6NVD

graylog

NPM

More on this CVE

NVD↗GitHub Advisory↗

Graylog2 client library for node.js

< 2.4.6NVD

Security Advisories

CVE-2018-14380

Description

More on this CVE