Description (CNA)
Graylog before v2.4.4 has an XSS security issue with unescaped text in notifications, related to toastr and util/UserNotification.js.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/Graylog2/graylog2-server/pull/4727
- https://www.graylog.org/post/announcing-graylog-v2-4-4
ADP enrichment
No English description supplied.