Description

An issue was discovered in Logpoint before 7.1.1. Template injection was seen in the search template. The search template uses jinja templating for generating dynamic data. This could be abused to achieve code execution. Any user with access to create a search template can leverage this to execute code as the loginspect user.

INFO

Published Date :

2024-04-27T00:00:00.000Z

Last Modified :

2024-10-25T19:30:09.579Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2022-48684 vulnerability.

Vendors Products
Logpoint
  • Logpoint
  • Siem
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2022-48684.

URL Resource
https://servicedesk.logpoint.com/hc/en-us/articles/7201134201885-Template-injection-in-Search-Template cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Complexity
Attack Vector
Availability Impact
Confidentiality Impact
Integrity Impact
Privileges Required
Scope
User Interaction