medium5.9

CVE-2024-56085

An issue was discovered in Logpoint before 7.5.0.

Impact

An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while creating Search Template Dashboard. These are executed, leading to Server-Side Template Injection.

Affected products

Vendor	Product	Affected versions
Logpoint	Siem	before 7.5.0

Weakness classification

CWE-77

References

NVD record
CVE.org record
https://servicedesk.logpoint.com/hc/en-us/articles/22137660393757-Server-Side-Template-Injection-SSTI-in-Search-Template-Dashboard