CVE-2022-48684

An issue was discovered in Logpoint before 7.1.1

High · published April 27, 2024

CVSS v3.1
8.4
EPSS
1%
Percentile
50.0
In the wild
Unconfirmed
What it is

An issue was discovered in Logpoint before 7.1.1. Template injection was seen in the search template. The search template uses jinja templating for generating dynamic data. This could be abused to achieve code execution. Any user with access to create a search template can leverage this to execute code as the loginspect user.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:R
CVSS v4.0
Not supplied
EPSS
0.00639 · 50.0th percentile
Published
2024-04-27T00:00Z
EPSS history
Timeline
  • 27 APR 00:00Z
    An issue was discovered in Logpoint before 7.1.1
    cvelistv5