shrikeinfosec/cve-2023-49950

shrikeinfosec/cve-2023-49950

GitHubGitHub
GitHubgithub.com
Releases0
A write-up detailing CVE-2023-49950. Affects Logpoint SIEM v6.1.0-v7.3.0
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-49950↗
5.4 MEDIUM—

The Jinja templating in Logpoint SIEM 6.10.0 through 7.x before 7.3.0 does not correctly sanitize log data being displayed when using a custom Jinja template in the Alert view. A remote attacker can craft a cross-site scripting (XSS) payload and send it to any system or device that sends logs to the SIEM. If an alert is created, the payload will execute upon the alert data being viewed with that template, which can lead to sensitive data disclosure.