CVE-2024-56085 - CERT CVE
ID CVE-2024-56085
Sažetak An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while creating Search Template Dashboard. These are executed, leading to Server-Side Template Injection.
Reference
CVSS
Base: 5.9
Impact: 4.7
Exploitability:1.2
Pristup
VektorSloženostAutentikacija
ADJACENT_NETWORK HIGH LOW
Impact
PovjerljivostCjelovitostDostupnost
HIGH LOW LOW
CVSS vektor CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L
Zadnje važnije ažuriranje 16-12-2024 - 16:15
Objavljeno 16-12-2024 - 06:15