{"id":"CVE-2024-24824","summary":"graylog2-server vulnerable to instantiation of arbitrary classes triggered by API request","details":"Graylog is a free and open log management platform. Starting in version 2.0.0 and prior to versions 5.1.11 and 5.2.4, arbitrary classes can be loaded and instantiated using a HTTP PUT request to the `/api/system/cluster_config/` endpoint. Graylog's cluster config system uses fully qualified class names as config keys. To validate the existence of the requested class before using them, Graylog loads the class using the class loader. If a user with the appropriate permissions performs the request, arbitrary classes with 1-arg String constructors can be instantiated. This will execute arbitrary code that is run during class instantiation. In the specific use case of `java.io.File`, the behavior of the internal web-server stack will lead to information exposure by including the entire file content in the response to the REST request. Versions 5.1.11 and 5.2.4 contain a fix for this issue.","aliases":["GHSA-p6gg-5hf4-4rgj"],"modified":"2026-08-12T15:15:05.309974Z","published":"2024-02-07T17:25:20.102Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-284","CWE-863"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/24xxx/CVE-2024-24824.json"},"references":[{"type":"WEB","url":"https://github.com/Graylog2/graylog2-server/blob/e458db8bf4f789d4d19f1b37f0263f910c8d036c/graylog2-server/src/main/java/org/graylog2/rest/resources/system/ClusterConfigResource.java#L208-L214"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/24xxx/CVE-2024-24824.json"},{"type":"ADVISORY","url":"https://github.com/Graylog2/graylog2-server/security/advisories/GHSA-p6gg-5hf4-4rgj"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-24824"},{"type":"FIX","url":"https://github.com/Graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8"},{"type":"FIX","url":"https://github.com/Graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/graylog2/graylog2-server","events":[{"introduced":"2dc6c030e4668322ab7c8f205df89980531e697a"},{"fixed":"ae77f4dd1bb23bf07ba034a7a18083e813b8ccbc"},{"introduced":"8a9ccef8356773c1fd835dbbb51239e1872c17a3"},{"fixed":"ec33db8aa331ce35a87fd19bf69eb304868442ef"},{"fixed":"75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8"},{"fixed":"7f8ef7fa8edf493106d5ef6f777d4da02c5194d9"}],"database_specific":{"cpe":"cpe:2.3:a:graylog:graylog:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.0.0"},{"fixed":"5.1.11"},{"introduced":"5.2.0"},{"fixed":"5.2.4"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["5.2.3","5.2.2","5.2.1","5.2.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-24824.json","vanir_signatures_modified":"2026-08-12T15:15:05Z","vanir_signatures":[{"id":"CVE-2024-24824-011163af","signature_type":"Line","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8","target":{"file":"graylog2-server/src/main/java/org/graylog2/cluster/ClusterConfigServiceImpl.java"},"deprecated":false,"digest":{"line_hashes":["106145388101213987104789695857917897829","148818741582743154606791902046669882806","336944419190221122305895765753158165502","172455628726752652811018649209160834070","230779821763261705684750583861460408154","134768838672279086867703740345395717195","276143296717948452758970992180505172500","56422928299232613204617732257590760194","289003192250618150136459381259104850854","37670892204585594881570066977774619690","201166341101379696542042455604942961163","339560380061316163486228199043512985323","268848958752758432295937472583456108281","210419353404767721554852551852261769522","316035100322761392416038384704918436097","88715931837800008409035868076057475090","148433568833413219421198665273890990608","172069243867671683420671490435564080911","308250580411155501002467682201645426639","33553373810913485762863285896562894531","220825132831206206706658764425628839259","69436469959072755974563440538417586173","43386725641579576477517183870865631118","167792359035840985992866312098060365780","25431625003115256437188431012518538712","191877126832846964969474158110542641930","194811043456619286294931621444423131004","119853569398166756104570777537816669717","11951367071482776507627872911701724714"],"threshold":0.9}},{"deprecated":false,"digest":{"function_hash":"279793684773354504388438608050830709635","length":394},"id":"CVE-2024-24824-0baeb89f","signature_type":"Function","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9","target":{"file":"graylog2-server/src/test/java/org/graylog2/migrations/V20161215163900_MoveIndexSetDefaultConfigTest.java","function":"setUp"}},{"deprecated":false,"digest":{"line_hashes":["161710548666346020653247610234778448588","38828386959360619729864263466191663778","150854033737160494587542847712542964426","139077139356046228890370330987464552711","272694397249202485982384155454818624396","299878345069113607027834323442204240273","230290858788058019605011711280650332127","154233032474315481514402225634904838264","37391067510895927195228322893279108471","107675465509015516389959947511494312328","8334411889181621637853471813005685295","41530418505674861125896935789659457706","147820454189633616687180122624769656780","124680544556993436503621906316115316541","267924162730568858175204721579272251595","324614522434062181825538562740743640547","335051176802509898308969467323325609041","248076998469588458408163724182668693938","99834868711623835175577980417903855537"],"threshold":0.9},"id":"CVE-2024-24824-1052f33d","signature_type":"Line","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8","target":{"file":"graylog2-server/src/main/java/org/graylog2/rest/resources/system/ClusterConfigResource.java"}},{"deprecated":false,"digest":{"length":378,"function_hash":"250930784575386165892257364250391936141"},"id":"CVE-2024-24824-10c06d85","signature_type":"Function","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8","target":{"file":"graylog2-server/src/test/java/org/graylog2/indexer/indexset/MongoIndexSetServiceTest.java","function":"setUp"}},{"source":"https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9","target":{"file":"graylog2-server/src/test/java/org/graylog2/indexer/indexset/MongoIndexSetServiceTest.java","function":"setUp"},"deprecated":false,"digest":{"function_hash":"250930784575386165892257364250391936141","length":378},"id":"CVE-2024-24824-1ba17ced","signature_type":"Function","signature_version":"v1"},{"target":{"file":"graylog2-server/src/main/java/org/graylog2/Configuration.java"},"deprecated":false,"digest":{"line_hashes":["180765971726962563063158719879832388814","181620927931096044224603812573061678210","123679281751275890140639389626326869204","198432957076330882403003254891005823475","134173054671521758212100996157176874209","45072673719736333811138278446154485134","169939521063984823210712784655326879363","321992304142618368876514058354154821009","167510851128902435243134587057982059537","52072569263869251608662606966749943315","93390510080549522783033339292373262604","277973502733037721471639927443096045097","115089420536154539386107306783042726239","292108911572587945026335197132978432831","319979261238784776918087330646880012186","10110348712734115500060727716466903351","36598953047835774350412276754288706133"],"threshold":0.9},"id":"CVE-2024-24824-30005abc","signature_type":"Line","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9"},{"deprecated":false,"digest":{"line_hashes":["154624375970419775574059089750340678879","216091950628868149476314907078387520722","63450927453594234439577553056901412106","55019448000258056514163664772696166868","71152908445424762937421595902823974767","3977068283615178633991280658144698784","85401393994054726921919083822637180250","85799692015118010283805001446123625858","14052406633022170565582090309992589174","231538672638194721633211620188373608891","64351721872799545451309644622399062466","266685233425187688502941791158629554187","76807650028387633354667574414133529701","184418101144864048661064943627611124688"],"threshold":0.9},"id":"CVE-2024-24824-338badda","signature_type":"Line","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9","target":{"file":"graylog2-server/src/test/java/org/graylog2/migrations/V20170110150100_FixAlertConditionsMigrationTest.java"}},{"digest":{"function_hash":"328512441627256132026528640360316957410","length":345},"id":"CVE-2024-24824-3bf084b8","signature_type":"Function","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8","target":{"file":"graylog2-server/src/test/java/org/graylog2/events/ClusterEventPeriodicalTest.java","function":"setUpService"},"deprecated":false},{"target":{"file":"graylog2-server/src/test/java/org/graylog2/migrations/V20161215163900_MoveIndexSetDefaultConfigTest.java"},"deprecated":false,"digest":{"line_hashes":["211884395291188843918665303771844985340","140409631758786950467322669870394535182","63450927453594234439577553056901412106","55019448000258056514163664772696166868","71152908445424762937421595902823974767","3977068283615178633991280658144698784","190376638595197866245591278350122687463","149012691624105830179473186692837014140","150416626133083083434256985572548344479","269737500755509136435866263603901744692","231538672638194721633211620188373608891","305094136446045658643759611705010543200","64351721872799545451309644622399062466","317424942368611761471630407238551767005","6885700159355676936679651609605782622","12312477859913683599935727293497756777"],"threshold":0.9},"id":"CVE-2024-24824-3fd757bb","signature_type":"Line","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8"},{"deprecated":false,"digest":{"length":492,"function_hash":"108172833561680913756188776065622340523"},"id":"CVE-2024-24824-4c115130","signature_type":"Function","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9","target":{"file":"graylog2-server/src/main/java/org/graylog2/cluster/ClusterConfigServiceImpl.java","function":"list"}},{"target":{"file":"graylog2-server/src/main/java/org/graylog2/rest/resources/system/ClusterConfigResource.java","function":"classFromName"},"deprecated":false,"digest":{"function_hash":"83123904365783913756809759094053632590","length":145},"id":"CVE-2024-24824-4de58527","signature_type":"Function","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9"},{"digest":{"line_hashes":["315932982484924679076921010894495204141","274491342831043747468370216160871662015","63450927453594234439577553056901412106","308654831074451440518289861808436749643","119992077491943672122986273783894065448","35787420480576072283077687713829904240","317334084963550632817994376894022346432","21979408096179108286698612172797822172","219243108371805712318942531276876055367","117433432317399112018494464605191249647","249296086288554243975604314503423872640","118927159922657067870300761233940066256","239880972093836442347011351531890373389","198183357581460053461905367679540236262","246181627068471410107299566811776418946","144079048678794834730533359341937080798","153270453439979564701765774135617882048","293370749022280162367161016811898440680","167361690019746514017989275563430964518"],"threshold":0.9},"id":"CVE-2024-24824-4ede4d09","signature_type":"Line","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9","target":{"file":"graylog2-server/src/test/java/org/graylog2/events/ClusterEventPeriodicalTest.java"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"267767545361004083937905791836864439305","length":626},"id":"CVE-2024-24824-56cecea2","signature_type":"Function","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8","target":{"file":"graylog2-server/src/test/java/org/graylog/plugins/views/search/views/ViewServiceTest.java","function":"setUp"}},{"deprecated":false,"digest":{"line_hashes":["154624375970419775574059089750340678879","216091950628868149476314907078387520722","63450927453594234439577553056901412106","55019448000258056514163664772696166868","71152908445424762937421595902823974767","3977068283615178633991280658144698784","85401393994054726921919083822637180250","85799692015118010283805001446123625858","14052406633022170565582090309992589174","231538672638194721633211620188373608891","64351721872799545451309644622399062466","266685233425187688502941791158629554187","76807650028387633354667574414133529701","184418101144864048661064943627611124688"],"threshold":0.9},"id":"CVE-2024-24824-59ce2dc6","signature_type":"Line","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8","target":{"file":"graylog2-server/src/test/java/org/graylog2/migrations/V20170110150100_FixAlertConditionsMigrationTest.java"}},{"target":{"file":"graylog2-server/src/test/java/org/graylog2/migrations/V20170110150100_FixAlertConditionsMigrationTest.java","function":"setUp"},"deprecated":false,"digest":{"function_hash":"44195318776852264039577354754952029620","length":602},"id":"CVE-2024-24824-5bd9245d","signature_type":"Function","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8"},{"source":"https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9","target":{"file":"graylog2-server/src/test/java/org/graylog/plugins/views/search/views/ViewServiceTest.java"},"deprecated":false,"digest":{"line_hashes":["234408295605640523843870832787572165744","278659384676477394820083074840088943858","186932764336521743035946539751260159729","171328586349684067001272893080727995340","177146092531788179996910551435361215730","294274549688573819976570300480953005450","126706383389364076025876539379634913257","218381679132739609571726954111012423628"],"threshold":0.9},"id":"CVE-2024-24824-5e6f7718","signature_type":"Line","signature_version":"v1"},{"id":"CVE-2024-24824-77189ceb","signature_type":"Line","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8","target":{"file":"graylog2-server/src/main/java/org/graylog2/Configuration.java"},"deprecated":false,"digest":{"line_hashes":["162706421638325243735809275276580095733","247298790549959696340182169089801943866","278711751168698283116847979715946249633","249348346183334762048254856340281405163","134173054671521758212100996157176874209","169864540711173939884705629292120500563","223795503792986863375451982885326731137","125356082782061028070534271662228961412","297720539314615995672263715080213375479","37863303084277420342425766573891403616","177055068037606924780347469955396190350","71871728576006228522303391778141377279","22782476526445584375967534864128269043","157696188057240274538980532770659911475","322144876038574375541729609707200980475","10110348712734115500060727716466903351","36598953047835774350412276754288706133"],"threshold":0.9}},{"source":"https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8","target":{"file":"graylog2-server/src/test/java/org/graylog2/indexer/indexset/MongoIndexSetServiceTest.java"},"deprecated":false,"digest":{"line_hashes":["142904998543480303402275309852297776786","178404705470187498892549372810025992626","63450927453594234439577553056901412106","69076832076371246289608073903204959709","78455401914028794378163440042224996494","241830708279717170405914820766138536850","1138183706744348948938954915122230956","281264703872180521185720462974832648631"],"threshold":0.9},"id":"CVE-2024-24824-787cfa42","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8","target":{"file":"graylog2-server/src/test/java/org/graylog2/migrations/V20161215163900_MoveIndexSetDefaultConfigTest.java","function":"setUp"},"deprecated":false,"digest":{"function_hash":"279793684773354504388438608050830709635","length":394},"id":"CVE-2024-24824-7bd0c86e","signature_type":"Function"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["161710548666346020653247610234778448588","38828386959360619729864263466191663778","150854033737160494587542847712542964426","139077139356046228890370330987464552711","272694397249202485982384155454818624396","299878345069113607027834323442204240273","230290858788058019605011711280650332127","154233032474315481514402225634904838264","37391067510895927195228322893279108471","107675465509015516389959947511494312328","8334411889181621637853471813005685295","41530418505674861125896935789659457706","147820454189633616687180122624769656780","124680544556993436503621906316115316541","267924162730568858175204721579272251595","324614522434062181825538562740743640547","335051176802509898308969467323325609041","248076998469588458408163724182668693938","99834868711623835175577980417903855537"]},"id":"CVE-2024-24824-923481cd","signature_type":"Line","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9","target":{"file":"graylog2-server/src/main/java/org/graylog2/rest/resources/system/ClusterConfigResource.java"}},{"deprecated":false,"digest":{"line_hashes":["106145388101213987104789695857917897829","148818741582743154606791902046669882806","336944419190221122305895765753158165502","172455628726752652811018649209160834070","230779821763261705684750583861460408154","134768838672279086867703740345395717195","276143296717948452758970992180505172500","56422928299232613204617732257590760194","289003192250618150136459381259104850854","37670892204585594881570066977774619690","201166341101379696542042455604942961163","339560380061316163486228199043512985323","268848958752758432295937472583456108281","210419353404767721554852551852261769522","316035100322761392416038384704918436097","88715931837800008409035868076057475090","148433568833413219421198665273890990608","172069243867671683420671490435564080911","308250580411155501002467682201645426639","33553373810913485762863285896562894531","220825132831206206706658764425628839259","69436469959072755974563440538417586173","43386725641579576477517183870865631118","167792359035840985992866312098060365780","25431625003115256437188431012518538712","191877126832846964969474158110542641930","194811043456619286294931621444423131004","119853569398166756104570777537816669717","11951367071482776507627872911701724714"],"threshold":0.9},"id":"CVE-2024-24824-9515deaf","signature_type":"Line","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9","target":{"file":"graylog2-server/src/main/java/org/graylog2/cluster/ClusterConfigServiceImpl.java"}},{"signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8","target":{"file":"graylog2-server/src/main/java/org/graylog2/events/ClusterEventPeriodical.java"},"deprecated":false,"digest":{"line_hashes":["211075037160905203971334478046512265910","223514740340969837105255500390157139896","92025410146990913018547013526374301666","163497497882976186355536545823901271524","315323688859178693120832972878744010898","241795872111721895579341936486825754577","191891668541357217037855476618244827600","171827953089675897276271190881654181958","122555615079866400755679054168994764290","2292677775128343187408031006139290398","269711276829506601928465463026398242120","154233138618718753519836595233942999006","8402382785152205552117660603614207385","185413215159538557659544043063267492654","322467433894274200844143459415323684634","281868067863425760877085942781262468301","149434627514060897294081426387573152630","9265167808324241278838311803229019029","115710622566250599703161846014609674104","129671065731279333089131549486401555755","142086404922446902573967282254792335402","242612767206647728254293124567120894107","245539374891893269267041923585836777718","217751155015276410528723257835516926015","339803292614404202810353464215099759204","302402107089503818554887176845010237002","188257678992768713353341618671010792507","203518291961723911134239790222457249710","264561458281586225727787972463342441099","320339856786463750751579443011434162251","236619778761387797797764572079601118656","235418725339577930474410891947604189632","54537087558099102311836523239971004875","236384946179514223181142257960098845694","43693651672511506419582617180681485734"],"threshold":0.9},"id":"CVE-2024-24824-9b5528e4","signature_type":"Line"},{"digest":{"line_hashes":["29289298922309864018401767873558415661","42014011162793980020867880104878486295","103273978182219818339485467589899350117","72505508482722725129192186824356403152","153404133976687965807766415651571528863","219323883360577638278020402138608842558","295616991934401649358068825686800839266","308501206174841743435022832971841671240","103050865139538955794393108224917006884","98259808073733271104982406287366554094","217230453389946084555171557440844605694","168852079435972678722290272875483355568","12967909501878120920309818491858248467","334963015541379103354879644692007812386","45145598731911331620918255345358315641"],"threshold":0.9},"id":"CVE-2024-24824-a38f094b","signature_type":"Line","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8","target":{"file":"data-node/src/main/java/org/graylog/datanode/Configuration.java"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["302435043598710370175823286828515897294","178404705470187498892549372810025992626","63450927453594234439577553056901412106","47129387310209669208842887221862733462","219243108371805712318942531276876055367","300668640707619361988641405809422210930","269616351367682149981990510901202754317","76662915811794108735852472721104813422","163327338387523051881998275439579295474","227251786284309568901499648543275641753","175787767166451721207908681870649228903","312939304939484270516556680686410418758","60790795678416549404020843386169675769","165088272116666053313984133530562576718","193494742300243233696202984615718260690"],"threshold":0.9},"id":"CVE-2024-24824-a582753c","signature_type":"Line","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9","target":{"file":"graylog2-server/src/test/java/org/graylog2/cluster/ClusterConfigServiceImplTest.java"}},{"id":"CVE-2024-24824-aab029d5","signature_type":"Function","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8","target":{"file":"graylog2-server/src/test/java/org/graylog2/cluster/ClusterConfigServiceImplTest.java","function":"listIgnoresInvalidClasses"},"deprecated":false,"digest":{"function_hash":"208687750840308585165684008468473799360","length":818}},{"digest":{"function_hash":"44195318776852264039577354754952029620","length":602},"id":"CVE-2024-24824-aae1d6ac","signature_type":"Function","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9","target":{"file":"graylog2-server/src/test/java/org/graylog2/migrations/V20170110150100_FixAlertConditionsMigrationTest.java","function":"setUp"},"deprecated":false},{"source":"https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9","target":{"file":"graylog2-server/src/test/java/org/graylog2/cluster/ClusterConfigServiceImplTest.java","function":"listIgnoresInvalidClasses"},"deprecated":false,"digest":{"function_hash":"208687750840308585165684008468473799360","length":818},"id":"CVE-2024-24824-b635cc75","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["142904998543480303402275309852297776786","178404705470187498892549372810025992626","63450927453594234439577553056901412106","69076832076371246289608073903204959709","78455401914028794378163440042224996494","241830708279717170405914820766138536850","1138183706744348948938954915122230956","281264703872180521185720462974832648631"],"threshold":0.9},"id":"CVE-2024-24824-b9b9c404","signature_type":"Line","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9","target":{"file":"graylog2-server/src/test/java/org/graylog2/indexer/indexset/MongoIndexSetServiceTest.java"}},{"source":"https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9","target":{"file":"graylog2-server/src/test/java/org/graylog2/events/ClusterEventPeriodicalTest.java","function":"setUpService"},"deprecated":false,"digest":{"function_hash":"328512441627256132026528640360316957410","length":345},"id":"CVE-2024-24824-b9c207b7","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8","target":{"file":"graylog2-server/src/main/java/org/graylog2/rest/resources/system/ClusterConfigResource.java","function":"classFromName"},"deprecated":false,"digest":{"function_hash":"83123904365783913756809759094053632590","length":145},"id":"CVE-2024-24824-be1bdf32","signature_type":"Function"},{"target":{"file":"graylog2-server/src/main/java/org/graylog2/cluster/ClusterConfigServiceImpl.java","function":"list"},"deprecated":false,"digest":{"function_hash":"108172833561680913756188776065622340523","length":492},"id":"CVE-2024-24824-c4c71a56","signature_type":"Function","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9","target":{"file":"data-node/src/main/java/org/graylog/datanode/Configuration.java"},"deprecated":false,"digest":{"line_hashes":["29289298922309864018401767873558415661","315360108112392664137932672280447305048","167096757028309261636515492889120656670","64300222604975745471208183604165983458","43392944080903242336847543440365695082","145735224600471353580726262435829510486","104568781498371905344999132661206843647","335715920034397561868349600187988948884","103050865139538955794393108224917006884","98259808073733271104982406287366554094","217230453389946084555171557440844605694","168852079435972678722290272875483355568","233087849971286261012090440853770929880","123447832646097464410277500525595112200","225504964511595639191223488589397903877"],"threshold":0.9},"id":"CVE-2024-24824-c9d2e046"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["211884395291188843918665303771844985340","140409631758786950467322669870394535182","63450927453594234439577553056901412106","55019448000258056514163664772696166868","71152908445424762937421595902823974767","3977068283615178633991280658144698784","190376638595197866245591278350122687463","149012691624105830179473186692837014140","150416626133083083434256985572548344479","269737500755509136435866263603901744692","231538672638194721633211620188373608891","305094136446045658643759611705010543200","64351721872799545451309644622399062466","317424942368611761471630407238551767005","6885700159355676936679651609605782622","12312477859913683599935727293497756777"]},"id":"CVE-2024-24824-cc4ce4e1","signature_type":"Line","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9","target":{"file":"graylog2-server/src/test/java/org/graylog2/migrations/V20161215163900_MoveIndexSetDefaultConfigTest.java"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9","target":{"function":"extractPayload","file":"graylog2-server/src/main/java/org/graylog2/events/ClusterEventPeriodical.java"},"deprecated":false,"digest":{"function_hash":"111907331301806600277863673605859713152","length":408},"id":"CVE-2024-24824-d1951168"},{"id":"CVE-2024-24824-d8868837","signature_type":"Function","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8","target":{"function":"setUpService","file":"graylog2-server/src/test/java/org/graylog2/cluster/ClusterConfigServiceImplTest.java"},"deprecated":false,"digest":{"function_hash":"237514894466385485955846616593880057680","length":326}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9","target":{"file":"graylog2-server/src/test/java/org/graylog2/cluster/ClusterConfigServiceImplTest.java","function":"setUpService"},"deprecated":false,"digest":{"function_hash":"237514894466385485955846616593880057680","length":326},"id":"CVE-2024-24824-da990bfd"},{"deprecated":false,"digest":{"line_hashes":["211075037160905203971334478046512265910","223514740340969837105255500390157139896","92025410146990913018547013526374301666","163497497882976186355536545823901271524","315323688859178693120832972878744010898","241795872111721895579341936486825754577","191891668541357217037855476618244827600","171827953089675897276271190881654181958","122555615079866400755679054168994764290","2292677775128343187408031006139290398","269711276829506601928465463026398242120","154233138618718753519836595233942999006","8402382785152205552117660603614207385","185413215159538557659544043063267492654","322467433894274200844143459415323684634","281868067863425760877085942781262468301","149434627514060897294081426387573152630","9265167808324241278838311803229019029","115710622566250599703161846014609674104","129671065731279333089131549486401555755","142086404922446902573967282254792335402","242612767206647728254293124567120894107","245539374891893269267041923585836777718","217751155015276410528723257835516926015","339803292614404202810353464215099759204","302402107089503818554887176845010237002","188257678992768713353341618671010792507","203518291961723911134239790222457249710","264561458281586225727787972463342441099","320339856786463750751579443011434162251","236619778761387797797764572079601118656","235418725339577930474410891947604189632","54537087558099102311836523239971004875","236384946179514223181142257960098845694","43693651672511506419582617180681485734"],"threshold":0.9},"id":"CVE-2024-24824-e679885c","signature_type":"Line","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9","target":{"file":"graylog2-server/src/main/java/org/graylog2/events/ClusterEventPeriodical.java"}},{"id":"CVE-2024-24824-f67c04dc","signature_type":"Function","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8","target":{"file":"graylog2-server/src/main/java/org/graylog2/events/ClusterEventPeriodical.java","function":"extractPayload"},"deprecated":false,"digest":{"function_hash":"111907331301806600277863673605859713152","length":408}},{"deprecated":false,"digest":{"line_hashes":["302435043598710370175823286828515897294","178404705470187498892549372810025992626","63450927453594234439577553056901412106","47129387310209669208842887221862733462","219243108371805712318942531276876055367","300668640707619361988641405809422210930","269616351367682149981990510901202754317","76662915811794108735852472721104813422","163327338387523051881998275439579295474","227251786284309568901499648543275641753","175787767166451721207908681870649228903","312939304939484270516556680686410418758","60790795678416549404020843386169675769","165088272116666053313984133530562576718","193494742300243233696202984615718260690"],"threshold":0.9},"id":"CVE-2024-24824-f6b363ec","signature_type":"Line","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8","target":{"file":"graylog2-server/src/test/java/org/graylog2/cluster/ClusterConfigServiceImplTest.java"}},{"target":{"file":"graylog2-server/src/test/java/org/graylog/plugins/views/search/views/ViewServiceTest.java"},"deprecated":false,"digest":{"line_hashes":["234408295605640523843870832787572165744","278659384676477394820083074840088943858","186932764336521743035946539751260159729","171328586349684067001272893080727995340","177146092531788179996910551435361215730","294274549688573819976570300480953005450","126706383389364076025876539379634913257","218381679132739609571726954111012423628"],"threshold":0.9},"id":"CVE-2024-24824-f7600628","signature_type":"Line","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8"},{"deprecated":false,"digest":{"function_hash":"296695959971938642156392021511425542860","length":691},"id":"CVE-2024-24824-f808605b","signature_type":"Function","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9","target":{"file":"graylog2-server/src/test/java/org/graylog/plugins/views/search/views/ViewServiceTest.java","function":"setUp"}},{"target":{"file":"graylog2-server/src/test/java/org/graylog2/events/ClusterEventPeriodicalTest.java"},"deprecated":false,"digest":{"line_hashes":["315932982484924679076921010894495204141","274491342831043747468370216160871662015","63450927453594234439577553056901412106","308654831074451440518289861808436749643","119992077491943672122986273783894065448","35787420480576072283077687713829904240","317334084963550632817994376894022346432","21979408096179108286698612172797822172","219243108371805712318942531276876055367","117433432317399112018494464605191249647","249296086288554243975604314503423872640","118927159922657067870300761233940066256","239880972093836442347011351531890373389","198183357581460053461905367679540236262","246181627068471410107299566811776418946","144079048678794834730533359341937080798","153270453439979564701765774135617882048","293370749022280162367161016811898440680","167361690019746514017989275563430964518"],"threshold":0.9},"id":"CVE-2024-24824-feb260db","signature_type":"Line","signature_version":"v1","source":"https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}