CVE-2025-30373
Medium
Description
Graylog is a free and open log management platform. Starting with 6.1, HTTP Inputs can be configured to check if a specified header is present and has a specified value to authenticate HTTP-based ingestion. Unfortunately, even though in cases of a missing header or a wrong value the correct HTTP response (401) is returned, the message will be ingested nonetheless. To mitigate the vulnerability, disable http-based inputs and allow only authenticated pull-based inputs. This vulnerability is fixed in 6.1.9.
SeverityMedium
CVSS6.5
Exploit probability—
ProductGraylog
PublishedApr 7, 2025
First seenApr 7, 2025
Weakness typeCWE-285CWE-285
How to fix
Update
- graylog graylog6.1.9 or later
- org.graylog2:graylog2-server6.1.9 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| graylog graylog | 6.1.0 ≤ v < 6.1.9 | 6.1.9 |
| org.graylog2:graylog2-serverMaven | 6.1.0 ≤ v < 6.1.9 | 6.1.9 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.