From 2bf7a720bc189bf21d583cdf76e4bad2f0feb6c3 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Wed, 7 May 2025 15:05:35 +0000
Subject: [PATCH] Publish GHSA-q7g5-jq6p-6wvx

---
 .../2025/04/GHSA-q7g5-jq6p-6wvx/GHSA-q7g5-jq6p-6wvx.json      | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/advisories/github-reviewed/2025/04/GHSA-q7g5-jq6p-6wvx/GHSA-q7g5-jq6p-6wvx.json b/advisories/github-reviewed/2025/04/GHSA-q7g5-jq6p-6wvx/GHSA-q7g5-jq6p-6wvx.json
index 5913afc6f7b..8c386f31851 100644
--- a/advisories/github-reviewed/2025/04/GHSA-q7g5-jq6p-6wvx/GHSA-q7g5-jq6p-6wvx.json
+++ b/advisories/github-reviewed/2025/04/GHSA-q7g5-jq6p-6wvx/GHSA-q7g5-jq6p-6wvx.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-q7g5-jq6p-6wvx",
-  "modified": "2025-04-07T16:37:52Z",
+  "modified": "2025-05-07T15:03:32Z",
   "published": "2025-04-07T16:37:52Z",
   "aliases": [
     "CVE-2025-30373"
   ],
   "summary": "Graylog's Authenticated HTTP inputs ingest message even if Authorization header is missing or has wrong value",
-  "details": "### Impact\nStarting with 6.1, HTTP Inputs can be configured to check if a specified header is present and has a specified value to authenticate HTTP-based ingestion. Unfortunately, even though in cases of a missing header or a wrong value the correct HTTP response (401) is returned, the message will be ingested nonetheless.\n\n### Patches\n\n### Workarounds\nDisabling http-based inputs and allow only authenticated pull-based inputs.\n\n### References",
+  "details": "### Impact\nStarting with 6.1, HTTP Inputs can be configured to check if a specified header is present and has a specified value to authenticate HTTP-based ingestion. Unfortunately, even though in cases of a missing header or a wrong value the correct HTTP response (401) is returned, the message will be ingested nonetheless.\n\n### Patches\n\n### Workarounds\nDisabling http-based inputs and allow only authenticated pull-based inputs.\n\nAnalysis provided by Fabian Yamaguchi - Whirly Labs (Pty) Ltd",
   "severity": [
     {
       "type": "CVSS_V3",