CVE-2024-33857

Name of the Vulnerable Software and Affected Versions Logpoint versions prior to 7.4.0

Description An issue was discovered due to a lack of input validation on URLs in threat intelligence. This allows an attacker with low-level access to the system to trigger Server Side Request Forgery.

Recommendations For versions prior to 7.4.0, update to version 7.4.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the threat intelligence feature to minimize the risk of exploitation.