CVE-2025-54317

{"id": "CVE-2025-54317", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.7}]}, "published": "2025-07-20T19:15:24.410", "references": [{"url": "https://servicedesk.logpoint.com/hc/en-us/articles/28685507675549-Path-Traversal-in-Layout-Templates-Allows-Remote-Code-Execution", "source": "[email protected]"}, {"url": "https://servicedesk.logpoint.com/hc/en-us/sections/7201103730845-Product-Security", "source": "[email protected]"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-23"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Logpoint before 7.6.0. An attacker with operator privileges can exploit a path traversal vulnerability when creating a Layout Template, which can lead to remote code execution (RCE)."}, {"lang": "es", "value": "Se detect\u00f3 un problema en Logpoint antes de la versi\u00f3n 7.6.0. Un atacante con privilegios de operador puede explotar una vulnerabilidad de path traversal al crear una plantilla de dise\u00f1o, lo que puede provocar la ejecuci\u00f3n remota de c\u00f3digo (RCE)."}], "lastModified": "2025-07-30T16:15:28.560", "sourceIdentifier": "[email protected]"}