Описание
An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads in Report Templates. These are executed when the backup process is initiated, leading to Remote Code Execution.
Уязвимые конфигурации
Конфигурация 1Версия до 7.5.0 (исключая)
cpe:2.3:a:logpoint:siem:*:*:*:*:*:*:*:*
EPSS
Процентиль: 83%
0.01967
Низкий
7.1 High
CVSS3
Дефекты
CWE-77
Связанные уязвимости
CVSS3: 7.1
github
около 1 года назад
An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads in Report Templates. These are executed when the backup process is initiated, leading to Remote Code Execution.
EPSS
Процентиль: 83%
0.01967
Низкий
7.1 High
CVSS3
Дефекты
CWE-77