| Package | Affected versions | Patched versions |
|---|---|---|
| org.graylog2:graylog2-server | < 2.4.4 | 2.4.4 |
| graylog | < 2.4.4 | 2.4.4 |
Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names, related to components/dashboard/Dashboard.jsx, components/dashboard/EditDashboardModal.jsx, and pages/ShowDashboardPage.jsx.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free