CVE-2024-33860

6.5 mediumEPSS 0.4%

Medium (6.5) in logpoint siem. EPSS 0.4% chance of exploitation in the next 30 days.

An issue was discovered in Logpoint before 7.4.0. It allows Local File Inclusion (LFI) when an arbitrary File Path is used within the File System Collector. The content of the file specified can be viewed in the incoming logs.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
CWE: CWE-73
Published: 2024-05-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

logpoint:siem

References

https://logpoint.com
https://servicedesk.logpoint.com/hc/en-us/articles/18533986803741-Local-File-Inclusion-in-File-System-Collector
https://logpoint.com
https://servicedesk.logpoint.com/hc/en-us/articles/18533986803741-Local-File-Inclusion-in-File-System-Collector

Check your stack JSON