Vulnerability Database

309,136

Total vulnerabilities in the database

CVE-2018-11651

Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names, related to components/dashboard/Dashboard.jsx, components/dashboard/EditDashboardModal.jsx, and pages/ShowDashboardPage.jsx.

Published: Jun 1, 2018
Updated: Nov 9, 2025
CVE: CVE-2018-11651
GHSA: GHSA-435g-r2m8-gjvm
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
graylog / graylog	-	2.4.4
org.graylog2 / graylog2-server	-	2.4.4

https://github.com/Graylog2/graylog2-server/pull/4739
https://www.graylog.org/post/announcing-graylog-v2-4-4

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo