cve/2024/CVE-2024-33860.md

18 lines
775 B
Markdown
Raw Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2024-33860](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33860)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
An issue was discovered in Logpoint before 7.4.0. It allows Local File Inclusion (LFI) when an arbitrary File Path is used within the File System Collector. The content of the file specified can be viewed in the incoming logs.
### POC
#### Reference
2025-09-29 16:08:36 +00:00
- https://servicedesk.logpoint.com/hc/en-us/articles/18533986803741-Local-File-Inclusion-in-File-System-Collector
2024-05-25 21:48:12 +02:00
#### Github
- https://github.com/fkie-cad/nvd-json-data-feeds