Logpoint · Logpoint · CVE-2022-48684
**Name of the Vulnerable Software and Affected Versions**
Logpoint versions prior to 7.1.1
**Description**
An issue was discovered in the search template of Logpoint, where template injection was seen. The search template uses jinja templating for generating dynamic data, which could be abused to achieve code execution. Any user with access to create a search template can leverage this to execute code as the loginspect user.
**Recommendations**
For versions prior to 7.1.1, upgrade Logpoint to the latest version to mitigate the risk of remote attacks. As a temporary workaround, consider restricting access to create search templates to minimize the risk of exploitation.