CVE-2024-56085

5.9 mediumEPSS 0.3%

Medium (5.9) in logpoint siem. EPSS 0.3% chance of exploitation in the next 30 days.

An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while creating Search Template Dashboard. These are executed, leading to Server-Side Template Injection.

Severity

CVSS 3.1

5.9 medium

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
CWE: CWE-77
Published: 2024-12-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

logpoint:siem

References

https://servicedesk.logpoint.com/hc/en-us/articles/22137660393757-Server-Side-Template-Injection-SSTI-in-Search-Template-Dashboard

Check your stack JSON