Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Logpoint

before 7.4.0

Source

cve@mitre.org

CVE-2024-33857 details

Published : May 7, 2024, 4:15 p.m.
Last Modified : May 7, 2024, 8:07 p.m.

Description

An issue was discovered in Logpoint before 7.4.0. Due to a lack of input validation on URLs in threat intelligence, an attacker with low-level access to the system can trigger Server Side Request Forgery.

CVSS Score

1	2	3	4	5	6	7	8	9	10

Weakness

Weakness	Name	Description

References

URL	Source
https://servicedesk.logpoint.com/hc/en-us/articles/18533639896093-Server-Side-Request-Forgery-SSRF-on-Threat-Intelligence	cve@mitre.org
https://servicedesk.logpoint.com/hc/en-us/categories/200832975-Knowledge-Center	cve@mitre.org

This website uses the NVD API, but is not approved or certified by it.

CVE-2024-33857