Advisory ID: LVD-2024-015
CVSSv 4.0 Vector: AV:A/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:L/SI:L/SA:L
CVSSv 4.0 Base Score: 5.9
Severity: Medium
CVE: CVE-2024-56085
CWE: CWE-1336
Date Published: 2024-10-15
Description:
Authenticated users can inject payloads while creating a Search Template Dashboard, which gets executed, leading to Server-Side Template Injection.
Affected Product:
Logpoint versions prior to 7.5.0.
Solution:
Upgrade to Logpoint v7.5.0.
Acknowledgments:
Mehmet D. Ince
Sr. Vulnerability Researcher
Comments
Article is closed for comments.