CVE-2024-24824

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-24824

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-24824.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-24824

Aliases

GHSA-p6gg-5hf4-4rgj

Published

2024-02-07T17:25:20.102Z

Modified

2026-07-22T02:51:06.196037Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

graylog2-server vulnerable to instantiation of arbitrary classes triggered by API request

Details

Graylog is a free and open log management platform. Starting in version 2.0.0 and prior to versions 5.1.11 and 5.2.4, arbitrary classes can be loaded and instantiated using a HTTP PUT request to the /api/system/cluster_config/ endpoint. Graylog's cluster config system uses fully qualified class names as config keys. To validate the existence of the requested class before using them, Graylog loads the class using the class loader. If a user with the appropriate permissions performs the request, arbitrary classes with 1-arg String constructors can be instantiated. This will execute arbitrary code that is run during class instantiation. In the specific use case of java.io.File, the behavior of the internal web-server stack will lead to information exposure by including the entire file content in the response to the REST request. Versions 5.1.11 and 5.2.4 contain a fix for this issue.

Database specific

{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-284",
        "CWE-863"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/24xxx/CVE-2024-24824.json"
}

References

Affected packages

Git / github.com/graylog2/graylog2-server

Affected ranges

Type

GIT

Repo

https://github.com/graylog2/graylog2-server

Events

Introduced

2dc6c030e4668322ab7c8f205df89980531e697a

Fixed

ae77f4dd1bb23bf07ba034a7a18083e813b8ccbc

Introduced

8a9ccef8356773c1fd835dbbb51239e1872c17a3

Fixed

ec33db8aa331ce35a87fd19bf69eb304868442ef

Fixed

75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8

Fixed

7f8ef7fa8edf493106d5ef6f777d4da02c5194d9

Database specific

{
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:graylog:graylog:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.0.0"
        },
        {
            "fixed": "5.1.11"
        },
        {
            "introduced": "5.2.0"
        },
        {
            "fixed": "5.2.4"
        }
    ]
}

Affected versions

5.*

5.2.0

5.2.1

5.2.2

5.2.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-24824.json"

vanir_signatures_modified

"2026-07-22T02:51:06Z"

vanir_signatures

[
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2024-24824-011163af",
        "digest": {
            "line_hashes": [
                "106145388101213987104789695857917897829",
                "148818741582743154606791902046669882806",
                "336944419190221122305895765753158165502",
                "172455628726752652811018649209160834070",
                "230779821763261705684750583861460408154",
                "134768838672279086867703740345395717195",
                "276143296717948452758970992180505172500",
                "56422928299232613204617732257590760194",
                "289003192250618150136459381259104850854",
                "37670892204585594881570066977774619690",
                "201166341101379696542042455604942961163",
                "339560380061316163486228199043512985323",
                "268848958752758432295937472583456108281",
                "210419353404767721554852551852261769522",
                "316035100322761392416038384704918436097",
                "88715931837800008409035868076057475090",
                "148433568833413219421198665273890990608",
                "172069243867671683420671490435564080911",
                "308250580411155501002467682201645426639",
                "33553373810913485762863285896562894531",
                "220825132831206206706658764425628839259",
                "69436469959072755974563440538417586173",
                "43386725641579576477517183870865631118",
                "167792359035840985992866312098060365780",
                "25431625003115256437188431012518538712",
                "191877126832846964969474158110542641930",
                "194811043456619286294931621444423131004",
                "119853569398166756104570777537816669717",
                "11951367071482776507627872911701724714"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "graylog2-server/src/main/java/org/graylog2/cluster/ClusterConfigServiceImpl.java"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2024-24824-0baeb89f",
        "digest": {
            "length": 394.0,
            "function_hash": "279793684773354504388438608050830709635"
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog2/migrations/V20161215163900_MoveIndexSetDefaultConfigTest.java",
            "function": "setUp"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2024-24824-1052f33d",
        "digest": {
            "line_hashes": [
                "161710548666346020653247610234778448588",
                "38828386959360619729864263466191663778",
                "150854033737160494587542847712542964426",
                "139077139356046228890370330987464552711",
                "272694397249202485982384155454818624396",
                "299878345069113607027834323442204240273",
                "230290858788058019605011711280650332127",
                "154233032474315481514402225634904838264",
                "37391067510895927195228322893279108471",
                "107675465509015516389959947511494312328",
                "8334411889181621637853471813005685295",
                "41530418505674861125896935789659457706",
                "147820454189633616687180122624769656780",
                "124680544556993436503621906316115316541",
                "267924162730568858175204721579272251595",
                "324614522434062181825538562740743640547",
                "335051176802509898308969467323325609041",
                "248076998469588458408163724182668693938",
                "99834868711623835175577980417903855537"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "graylog2-server/src/main/java/org/graylog2/rest/resources/system/ClusterConfigResource.java"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2024-24824-10c06d85",
        "digest": {
            "length": 378.0,
            "function_hash": "250930784575386165892257364250391936141"
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog2/indexer/indexset/MongoIndexSetServiceTest.java",
            "function": "setUp"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2024-24824-1ba17ced",
        "digest": {
            "length": 378.0,
            "function_hash": "250930784575386165892257364250391936141"
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog2/indexer/indexset/MongoIndexSetServiceTest.java",
            "function": "setUp"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2024-24824-30005abc",
        "digest": {
            "line_hashes": [
                "180765971726962563063158719879832388814",
                "181620927931096044224603812573061678210",
                "123679281751275890140639389626326869204",
                "198432957076330882403003254891005823475",
                "134173054671521758212100996157176874209",
                "45072673719736333811138278446154485134",
                "169939521063984823210712784655326879363",
                "321992304142618368876514058354154821009",
                "167510851128902435243134587057982059537",
                "52072569263869251608662606966749943315",
                "93390510080549522783033339292373262604",
                "277973502733037721471639927443096045097",
                "115089420536154539386107306783042726239",
                "292108911572587945026335197132978432831",
                "319979261238784776918087330646880012186",
                "10110348712734115500060727716466903351",
                "36598953047835774350412276754288706133"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "graylog2-server/src/main/java/org/graylog2/Configuration.java"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2024-24824-338badda",
        "digest": {
            "line_hashes": [
                "154624375970419775574059089750340678879",
                "216091950628868149476314907078387520722",
                "63450927453594234439577553056901412106",
                "55019448000258056514163664772696166868",
                "71152908445424762937421595902823974767",
                "3977068283615178633991280658144698784",
                "85401393994054726921919083822637180250",
                "85799692015118010283805001446123625858",
                "14052406633022170565582090309992589174",
                "231538672638194721633211620188373608891",
                "64351721872799545451309644622399062466",
                "266685233425187688502941791158629554187",
                "76807650028387633354667574414133529701",
                "184418101144864048661064943627611124688"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog2/migrations/V20170110150100_FixAlertConditionsMigrationTest.java"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2024-24824-3bf084b8",
        "digest": {
            "length": 345.0,
            "function_hash": "328512441627256132026528640360316957410"
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog2/events/ClusterEventPeriodicalTest.java",
            "function": "setUpService"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2024-24824-3fd757bb",
        "digest": {
            "line_hashes": [
                "211884395291188843918665303771844985340",
                "140409631758786950467322669870394535182",
                "63450927453594234439577553056901412106",
                "55019448000258056514163664772696166868",
                "71152908445424762937421595902823974767",
                "3977068283615178633991280658144698784",
                "190376638595197866245591278350122687463",
                "149012691624105830179473186692837014140",
                "150416626133083083434256985572548344479",
                "269737500755509136435866263603901744692",
                "231538672638194721633211620188373608891",
                "305094136446045658643759611705010543200",
                "64351721872799545451309644622399062466",
                "317424942368611761471630407238551767005",
                "6885700159355676936679651609605782622",
                "12312477859913683599935727293497756777"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog2/migrations/V20161215163900_MoveIndexSetDefaultConfigTest.java"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2024-24824-4c115130",
        "digest": {
            "length": 492.0,
            "function_hash": "108172833561680913756188776065622340523"
        },
        "target": {
            "file": "graylog2-server/src/main/java/org/graylog2/cluster/ClusterConfigServiceImpl.java",
            "function": "list"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2024-24824-4de58527",
        "digest": {
            "length": 145.0,
            "function_hash": "83123904365783913756809759094053632590"
        },
        "target": {
            "file": "graylog2-server/src/main/java/org/graylog2/rest/resources/system/ClusterConfigResource.java",
            "function": "classFromName"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2024-24824-4ede4d09",
        "digest": {
            "line_hashes": [
                "315932982484924679076921010894495204141",
                "274491342831043747468370216160871662015",
                "63450927453594234439577553056901412106",
                "308654831074451440518289861808436749643",
                "119992077491943672122986273783894065448",
                "35787420480576072283077687713829904240",
                "317334084963550632817994376894022346432",
                "21979408096179108286698612172797822172",
                "219243108371805712318942531276876055367",
                "117433432317399112018494464605191249647",
                "249296086288554243975604314503423872640",
                "118927159922657067870300761233940066256",
                "239880972093836442347011351531890373389",
                "198183357581460053461905367679540236262",
                "246181627068471410107299566811776418946",
                "144079048678794834730533359341937080798",
                "153270453439979564701765774135617882048",
                "293370749022280162367161016811898440680",
                "167361690019746514017989275563430964518"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog2/events/ClusterEventPeriodicalTest.java"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2024-24824-56cecea2",
        "digest": {
            "length": 626.0,
            "function_hash": "267767545361004083937905791836864439305"
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog/plugins/views/search/views/ViewServiceTest.java",
            "function": "setUp"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2024-24824-59ce2dc6",
        "digest": {
            "line_hashes": [
                "154624375970419775574059089750340678879",
                "216091950628868149476314907078387520722",
                "63450927453594234439577553056901412106",
                "55019448000258056514163664772696166868",
                "71152908445424762937421595902823974767",
                "3977068283615178633991280658144698784",
                "85401393994054726921919083822637180250",
                "85799692015118010283805001446123625858",
                "14052406633022170565582090309992589174",
                "231538672638194721633211620188373608891",
                "64351721872799545451309644622399062466",
                "266685233425187688502941791158629554187",
                "76807650028387633354667574414133529701",
                "184418101144864048661064943627611124688"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog2/migrations/V20170110150100_FixAlertConditionsMigrationTest.java"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2024-24824-5bd9245d",
        "digest": {
            "length": 602.0,
            "function_hash": "44195318776852264039577354754952029620"
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog2/migrations/V20170110150100_FixAlertConditionsMigrationTest.java",
            "function": "setUp"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2024-24824-5e6f7718",
        "digest": {
            "line_hashes": [
                "234408295605640523843870832787572165744",
                "278659384676477394820083074840088943858",
                "186932764336521743035946539751260159729",
                "171328586349684067001272893080727995340",
                "177146092531788179996910551435361215730",
                "294274549688573819976570300480953005450",
                "126706383389364076025876539379634913257",
                "218381679132739609571726954111012423628"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog/plugins/views/search/views/ViewServiceTest.java"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2024-24824-77189ceb",
        "digest": {
            "line_hashes": [
                "162706421638325243735809275276580095733",
                "247298790549959696340182169089801943866",
                "278711751168698283116847979715946249633",
                "249348346183334762048254856340281405163",
                "134173054671521758212100996157176874209",
                "169864540711173939884705629292120500563",
                "223795503792986863375451982885326731137",
                "125356082782061028070534271662228961412",
                "297720539314615995672263715080213375479",
                "37863303084277420342425766573891403616",
                "177055068037606924780347469955396190350",
                "71871728576006228522303391778141377279",
                "22782476526445584375967534864128269043",
                "157696188057240274538980532770659911475",
                "322144876038574375541729609707200980475",
                "10110348712734115500060727716466903351",
                "36598953047835774350412276754288706133"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "graylog2-server/src/main/java/org/graylog2/Configuration.java"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2024-24824-787cfa42",
        "digest": {
            "line_hashes": [
                "142904998543480303402275309852297776786",
                "178404705470187498892549372810025992626",
                "63450927453594234439577553056901412106",
                "69076832076371246289608073903204959709",
                "78455401914028794378163440042224996494",
                "241830708279717170405914820766138536850",
                "1138183706744348948938954915122230956",
                "281264703872180521185720462974832648631"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog2/indexer/indexset/MongoIndexSetServiceTest.java"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2024-24824-7bd0c86e",
        "digest": {
            "length": 394.0,
            "function_hash": "279793684773354504388438608050830709635"
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog2/migrations/V20161215163900_MoveIndexSetDefaultConfigTest.java",
            "function": "setUp"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2024-24824-923481cd",
        "digest": {
            "line_hashes": [
                "161710548666346020653247610234778448588",
                "38828386959360619729864263466191663778",
                "150854033737160494587542847712542964426",
                "139077139356046228890370330987464552711",
                "272694397249202485982384155454818624396",
                "299878345069113607027834323442204240273",
                "230290858788058019605011711280650332127",
                "154233032474315481514402225634904838264",
                "37391067510895927195228322893279108471",
                "107675465509015516389959947511494312328",
                "8334411889181621637853471813005685295",
                "41530418505674861125896935789659457706",
                "147820454189633616687180122624769656780",
                "124680544556993436503621906316115316541",
                "267924162730568858175204721579272251595",
                "324614522434062181825538562740743640547",
                "335051176802509898308969467323325609041",
                "248076998469588458408163724182668693938",
                "99834868711623835175577980417903855537"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "graylog2-server/src/main/java/org/graylog2/rest/resources/system/ClusterConfigResource.java"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2024-24824-9515deaf",
        "digest": {
            "line_hashes": [
                "106145388101213987104789695857917897829",
                "148818741582743154606791902046669882806",
                "336944419190221122305895765753158165502",
                "172455628726752652811018649209160834070",
                "230779821763261705684750583861460408154",
                "134768838672279086867703740345395717195",
                "276143296717948452758970992180505172500",
                "56422928299232613204617732257590760194",
                "289003192250618150136459381259104850854",
                "37670892204585594881570066977774619690",
                "201166341101379696542042455604942961163",
                "339560380061316163486228199043512985323",
                "268848958752758432295937472583456108281",
                "210419353404767721554852551852261769522",
                "316035100322761392416038384704918436097",
                "88715931837800008409035868076057475090",
                "148433568833413219421198665273890990608",
                "172069243867671683420671490435564080911",
                "308250580411155501002467682201645426639",
                "33553373810913485762863285896562894531",
                "220825132831206206706658764425628839259",
                "69436469959072755974563440538417586173",
                "43386725641579576477517183870865631118",
                "167792359035840985992866312098060365780",
                "25431625003115256437188431012518538712",
                "191877126832846964969474158110542641930",
                "194811043456619286294931621444423131004",
                "119853569398166756104570777537816669717",
                "11951367071482776507627872911701724714"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "graylog2-server/src/main/java/org/graylog2/cluster/ClusterConfigServiceImpl.java"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2024-24824-9b5528e4",
        "digest": {
            "line_hashes": [
                "211075037160905203971334478046512265910",
                "223514740340969837105255500390157139896",
                "92025410146990913018547013526374301666",
                "163497497882976186355536545823901271524",
                "315323688859178693120832972878744010898",
                "241795872111721895579341936486825754577",
                "191891668541357217037855476618244827600",
                "171827953089675897276271190881654181958",
                "122555615079866400755679054168994764290",
                "2292677775128343187408031006139290398",
                "269711276829506601928465463026398242120",
                "154233138618718753519836595233942999006",
                "8402382785152205552117660603614207385",
                "185413215159538557659544043063267492654",
                "322467433894274200844143459415323684634",
                "281868067863425760877085942781262468301",
                "149434627514060897294081426387573152630",
                "9265167808324241278838311803229019029",
                "115710622566250599703161846014609674104",
                "129671065731279333089131549486401555755",
                "142086404922446902573967282254792335402",
                "242612767206647728254293124567120894107",
                "245539374891893269267041923585836777718",
                "217751155015276410528723257835516926015",
                "339803292614404202810353464215099759204",
                "302402107089503818554887176845010237002",
                "188257678992768713353341618671010792507",
                "203518291961723911134239790222457249710",
                "264561458281586225727787972463342441099",
                "320339856786463750751579443011434162251",
                "236619778761387797797764572079601118656",
                "235418725339577930474410891947604189632",
                "54537087558099102311836523239971004875",
                "236384946179514223181142257960098845694",
                "43693651672511506419582617180681485734"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "graylog2-server/src/main/java/org/graylog2/events/ClusterEventPeriodical.java"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2024-24824-a38f094b",
        "digest": {
            "line_hashes": [
                "29289298922309864018401767873558415661",
                "42014011162793980020867880104878486295",
                "103273978182219818339485467589899350117",
                "72505508482722725129192186824356403152",
                "153404133976687965807766415651571528863",
                "219323883360577638278020402138608842558",
                "295616991934401649358068825686800839266",
                "308501206174841743435022832971841671240",
                "103050865139538955794393108224917006884",
                "98259808073733271104982406287366554094",
                "217230453389946084555171557440844605694",
                "168852079435972678722290272875483355568",
                "12967909501878120920309818491858248467",
                "334963015541379103354879644692007812386",
                "45145598731911331620918255345358315641"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "data-node/src/main/java/org/graylog/datanode/Configuration.java"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2024-24824-a582753c",
        "digest": {
            "line_hashes": [
                "302435043598710370175823286828515897294",
                "178404705470187498892549372810025992626",
                "63450927453594234439577553056901412106",
                "47129387310209669208842887221862733462",
                "219243108371805712318942531276876055367",
                "300668640707619361988641405809422210930",
                "269616351367682149981990510901202754317",
                "76662915811794108735852472721104813422",
                "163327338387523051881998275439579295474",
                "227251786284309568901499648543275641753",
                "175787767166451721207908681870649228903",
                "312939304939484270516556680686410418758",
                "60790795678416549404020843386169675769",
                "165088272116666053313984133530562576718",
                "193494742300243233696202984615718260690"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog2/cluster/ClusterConfigServiceImplTest.java"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2024-24824-aab029d5",
        "digest": {
            "length": 818.0,
            "function_hash": "208687750840308585165684008468473799360"
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog2/cluster/ClusterConfigServiceImplTest.java",
            "function": "listIgnoresInvalidClasses"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2024-24824-aae1d6ac",
        "digest": {
            "length": 602.0,
            "function_hash": "44195318776852264039577354754952029620"
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog2/migrations/V20170110150100_FixAlertConditionsMigrationTest.java",
            "function": "setUp"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2024-24824-b635cc75",
        "digest": {
            "length": 818.0,
            "function_hash": "208687750840308585165684008468473799360"
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog2/cluster/ClusterConfigServiceImplTest.java",
            "function": "listIgnoresInvalidClasses"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2024-24824-b9b9c404",
        "digest": {
            "line_hashes": [
                "142904998543480303402275309852297776786",
                "178404705470187498892549372810025992626",
                "63450927453594234439577553056901412106",
                "69076832076371246289608073903204959709",
                "78455401914028794378163440042224996494",
                "241830708279717170405914820766138536850",
                "1138183706744348948938954915122230956",
                "281264703872180521185720462974832648631"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog2/indexer/indexset/MongoIndexSetServiceTest.java"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2024-24824-b9c207b7",
        "digest": {
            "length": 345.0,
            "function_hash": "328512441627256132026528640360316957410"
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog2/events/ClusterEventPeriodicalTest.java",
            "function": "setUpService"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2024-24824-be1bdf32",
        "digest": {
            "length": 145.0,
            "function_hash": "83123904365783913756809759094053632590"
        },
        "target": {
            "file": "graylog2-server/src/main/java/org/graylog2/rest/resources/system/ClusterConfigResource.java",
            "function": "classFromName"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2024-24824-c4c71a56",
        "digest": {
            "length": 492.0,
            "function_hash": "108172833561680913756188776065622340523"
        },
        "target": {
            "file": "graylog2-server/src/main/java/org/graylog2/cluster/ClusterConfigServiceImpl.java",
            "function": "list"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2024-24824-c9d2e046",
        "digest": {
            "line_hashes": [
                "29289298922309864018401767873558415661",
                "315360108112392664137932672280447305048",
                "167096757028309261636515492889120656670",
                "64300222604975745471208183604165983458",
                "43392944080903242336847543440365695082",
                "145735224600471353580726262435829510486",
                "104568781498371905344999132661206843647",
                "335715920034397561868349600187988948884",
                "103050865139538955794393108224917006884",
                "98259808073733271104982406287366554094",
                "217230453389946084555171557440844605694",
                "168852079435972678722290272875483355568",
                "233087849971286261012090440853770929880",
                "123447832646097464410277500525595112200",
                "225504964511595639191223488589397903877"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "data-node/src/main/java/org/graylog/datanode/Configuration.java"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2024-24824-cc4ce4e1",
        "digest": {
            "line_hashes": [
                "211884395291188843918665303771844985340",
                "140409631758786950467322669870394535182",
                "63450927453594234439577553056901412106",
                "55019448000258056514163664772696166868",
                "71152908445424762937421595902823974767",
                "3977068283615178633991280658144698784",
                "190376638595197866245591278350122687463",
                "149012691624105830179473186692837014140",
                "150416626133083083434256985572548344479",
                "269737500755509136435866263603901744692",
                "231538672638194721633211620188373608891",
                "305094136446045658643759611705010543200",
                "64351721872799545451309644622399062466",
                "317424942368611761471630407238551767005",
                "6885700159355676936679651609605782622",
                "12312477859913683599935727293497756777"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog2/migrations/V20161215163900_MoveIndexSetDefaultConfigTest.java"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2024-24824-d1951168",
        "digest": {
            "length": 408.0,
            "function_hash": "111907331301806600277863673605859713152"
        },
        "target": {
            "file": "graylog2-server/src/main/java/org/graylog2/events/ClusterEventPeriodical.java",
            "function": "extractPayload"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2024-24824-d8868837",
        "digest": {
            "length": 326.0,
            "function_hash": "237514894466385485955846616593880057680"
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog2/cluster/ClusterConfigServiceImplTest.java",
            "function": "setUpService"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2024-24824-da990bfd",
        "digest": {
            "length": 326.0,
            "function_hash": "237514894466385485955846616593880057680"
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog2/cluster/ClusterConfigServiceImplTest.java",
            "function": "setUpService"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2024-24824-e679885c",
        "digest": {
            "line_hashes": [
                "211075037160905203971334478046512265910",
                "223514740340969837105255500390157139896",
                "92025410146990913018547013526374301666",
                "163497497882976186355536545823901271524",
                "315323688859178693120832972878744010898",
                "241795872111721895579341936486825754577",
                "191891668541357217037855476618244827600",
                "171827953089675897276271190881654181958",
                "122555615079866400755679054168994764290",
                "2292677775128343187408031006139290398",
                "269711276829506601928465463026398242120",
                "154233138618718753519836595233942999006",
                "8402382785152205552117660603614207385",
                "185413215159538557659544043063267492654",
                "322467433894274200844143459415323684634",
                "281868067863425760877085942781262468301",
                "149434627514060897294081426387573152630",
                "9265167808324241278838311803229019029",
                "115710622566250599703161846014609674104",
                "129671065731279333089131549486401555755",
                "142086404922446902573967282254792335402",
                "242612767206647728254293124567120894107",
                "245539374891893269267041923585836777718",
                "217751155015276410528723257835516926015",
                "339803292614404202810353464215099759204",
                "302402107089503818554887176845010237002",
                "188257678992768713353341618671010792507",
                "203518291961723911134239790222457249710",
                "264561458281586225727787972463342441099",
                "320339856786463750751579443011434162251",
                "236619778761387797797764572079601118656",
                "235418725339577930474410891947604189632",
                "54537087558099102311836523239971004875",
                "236384946179514223181142257960098845694",
                "43693651672511506419582617180681485734"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "graylog2-server/src/main/java/org/graylog2/events/ClusterEventPeriodical.java"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2024-24824-f67c04dc",
        "digest": {
            "length": 408.0,
            "function_hash": "111907331301806600277863673605859713152"
        },
        "target": {
            "file": "graylog2-server/src/main/java/org/graylog2/events/ClusterEventPeriodical.java",
            "function": "extractPayload"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2024-24824-f6b363ec",
        "digest": {
            "line_hashes": [
                "302435043598710370175823286828515897294",
                "178404705470187498892549372810025992626",
                "63450927453594234439577553056901412106",
                "47129387310209669208842887221862733462",
                "219243108371805712318942531276876055367",
                "300668640707619361988641405809422210930",
                "269616351367682149981990510901202754317",
                "76662915811794108735852472721104813422",
                "163327338387523051881998275439579295474",
                "227251786284309568901499648543275641753",
                "175787767166451721207908681870649228903",
                "312939304939484270516556680686410418758",
                "60790795678416549404020843386169675769",
                "165088272116666053313984133530562576718",
                "193494742300243233696202984615718260690"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog2/cluster/ClusterConfigServiceImplTest.java"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2024-24824-f7600628",
        "digest": {
            "line_hashes": [
                "234408295605640523843870832787572165744",
                "278659384676477394820083074840088943858",
                "186932764336521743035946539751260159729",
                "171328586349684067001272893080727995340",
                "177146092531788179996910551435361215730",
                "294274549688573819976570300480953005450",
                "126706383389364076025876539379634913257",
                "218381679132739609571726954111012423628"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog/plugins/views/search/views/ViewServiceTest.java"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/7f8ef7fa8edf493106d5ef6f777d4da02c5194d9",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2024-24824-f808605b",
        "digest": {
            "length": 691.0,
            "function_hash": "296695959971938642156392021511425542860"
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog/plugins/views/search/views/ViewServiceTest.java",
            "function": "setUp"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/graylog2/graylog2-server/commit/75ef2b8d60e7d67f859b79fe712c8ae7b2e861d8",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2024-24824-feb260db",
        "digest": {
            "line_hashes": [
                "315932982484924679076921010894495204141",
                "274491342831043747468370216160871662015",
                "63450927453594234439577553056901412106",
                "308654831074451440518289861808436749643",
                "119992077491943672122986273783894065448",
                "35787420480576072283077687713829904240",
                "317334084963550632817994376894022346432",
                "21979408096179108286698612172797822172",
                "219243108371805712318942531276876055367",
                "117433432317399112018494464605191249647",
                "249296086288554243975604314503423872640",
                "118927159922657067870300761233940066256",
                "239880972093836442347011351531890373389",
                "198183357581460053461905367679540236262",
                "246181627068471410107299566811776418946",
                "144079048678794834730533359341937080798",
                "153270453439979564701765774135617882048",
                "293370749022280162367161016811898440680",
                "167361690019746514017989275563430964518"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog2/events/ClusterEventPeriodicalTest.java"
        }
    }
]