Server-Side Template Injection Vulnerability in Logpoint Products
CVE-2024-56087

Currently unrated

Key Information:

Vendor

Logpoint

Status
Siem
Vendor
CVE Published:
16 December 2024

What is CVE-2024-56087?

CVE-2024-56087 identifies a critical Server-Side Template Injection (SSTI) vulnerability present in Logpoint versions prior to 7.5.0. This vulnerability allows authenticated users to inject malicious payloads during the querying process of the Search Template Dashboard. The resulting execution of these payloads can compromise the integrity of the affected systems by enabling unauthorized access and manipulation of data. Organizations utilizing Logpoint must address this vulnerability promptly to safeguard against potential exploitation.

References

https://servicedesk.logpoint.com/hc/en-us/articles/221376...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2024-56087 : Server-Side Template Injection Vulnerability in Logpoint Products