medium5.9

CVE-2024-56087

An issue was discovered in Logpoint before 7.5.0.

Impact

An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while querying Search Template Dashboard. These are executed, leading to Server-Side Template Injection.

Affected products

Vendor	Product	Affected versions
Logpoint	Siem	before 7.5.0

Weakness classification

CWE-77

References

NVD record
CVE.org record
https://servicedesk.logpoint.com/hc/en-us/articles/22137697881885-Server-Side-Template-Injection-SSTI-in-Search-Template-Dashboard-Queries