Server-Side Template Injection (SSTI) in Search Template Dashboard

Advisory ID: LVD-2024-015

CVSSv 4.0 Vector: AV:A/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:L/SI:L/SA:L

CVSSv 4.0 Base Score: 5.9

Severity: Medium

CVE: CVE-2024-56085

CWE: CWE-1336

Date Published: 2024-10-15

Description:

Authenticated users can inject payloads while creating a Search Template Dashboard, which gets executed, leading to Server-Side Template Injection. 

Affected Product:

Logpoint versions prior to 7.5.0.

Solution:

Upgrade to Logpoint v7.5.0.

Acknowledgments:

Mehmet D. Ince

Sr. Vulnerability Researcher

Prodaft