VulnerabilityAnalyzed

CVE-2022-48684

Template injection was seen in the search template.

HIGH 8.8EPSS 0.64%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.64%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

An issue was discovered in Logpoint before 7.1.1. Template injection was seen in the search template. The search template uses jinja templating for generating dynamic data. This could be abused to achieve code execution. Any user with access to create a search template can leverage this to execute code as the loginspect user.

CVSS 3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.64% probability · 49th percentile
CISA KEV: Not listed
Weakness: CWE-78
Affected: logpoint/siem
Source: cve@mitre.org

References

https://servicedesk.logpoint.com/hc/en-us/articles/7201134201885-Template-injection-in-Search-TemplateVendor Advisory
https://servicedesk.logpoint.com/hc/en-us/articles/7201134201885-Template-injection-in-Search-TemplateVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.