Vulnerability Description
The Jinja templating in Logpoint SIEM 6.10.0 through 7.x before 7.3.0 does not correctly sanitize log data being displayed when using a custom Jinja template in the Alert view. A remote attacker can craft a cross-site scripting (XSS) payload and send it to any system or device that sends logs to the SIEM. If an alert is created, the payload will execute upon the alert data being viewed with that template, which can lead to sensitive data disclosure.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Logpoint | Siem | >= 6.10.0, < 7.3.0 |
Related Weaknesses (CWE)
References
- https://github.com/shrikeinfosec/cve-2023-49950/blob/main/cve-2023-49950.mdExploit
- https://servicedesk.logpoint.com/hc/en-us/articles/14124495377437-Stored-XSS-VulVendor Advisory
- https://github.com/shrikeinfosec/cve-2023-49950/blob/main/cve-2023-49950.mdExploit
- https://servicedesk.logpoint.com/hc/en-us/articles/14124495377437-Stored-XSS-VulVendor Advisory
FAQ
What is CVE-2023-49950?
CVE-2023-49950 is a vulnerability with a CVSS score of 5.4 (MEDIUM). The Jinja templating in Logpoint SIEM 6.10.0 through 7.x before 7.3.0 does not correctly sanitize log data being displayed when using a custom Jinja template in the Alert view. A remote attacker can c...
How severe is CVE-2023-49950?
CVE-2023-49950 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-49950?
Check the references section above for vendor advisories and patch information. Affected products include: Logpoint Siem.