CVE-2022-48684 - CVE House
Back to Database
Status published High CVE-2022-48684

An issue was discovered in Logpoint before 7.1.1. Template injection...

Vulnerability Description

An issue was discovered in Logpoint before 7.1.1. Template injection was seen in the search template. The search template uses jinja templating for generating dynamic data. This could be abused to achieve code execution. Any user with access to create a search template can leverage this to execute code as the loginspect user.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-48684

Credits & Attribution

No credits recorded in the NVD database.

References

More from logpoint

View All →
CVE-2022-48685
An issue was discovered in Logpoint 7.1 before 7.1.2. The...
High 7.7

Affected Vendor

Affected Software

siem
Vulnerable Versions:
0

Timeline

Official Publish: April 27th, 2024
Last Modified: October 25th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:R

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.