What is CVE-2025-46827?

CVE-2025-46827 is a high-severity vulnerability in Graylog, classified under Cross-site Scripting. CVSS score: 8.0/10. Published 2025-05-07.

How severe is CVE-2025-46827?

High severity. CVSS v3 base score is 8.0 out of 10.

XSS in Graylog

CVE-2025-46827

Graylog is a free and open log management platform. Prior to versions 6.0.14, 6.1.10, and 6.2.0, it is possible to obtain user session cookies by submitting an HTML form as part of an Event Definition Remediation Step field. For this attac…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.002 (13.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H.

Affected products

Graylog
Graylog2 Graylog2-server — versions < 6.0.14, >= 6.1.0, < 6.1.10

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

security-advisories@github.com (x_refsource_CONFIRM, Third Party Advisory)

Frequently asked questions

What is CVE-2025-46827?: CVE-2025-46827 is a high-severity vulnerability in Graylog, classified under Cross-site Scripting. CVSS score: 8.0/10. Published 2025-05-07.
How severe is CVE-2025-46827?: High severity. CVSS v3 base score is 8.0 out of 10.