CVE-2024-33860

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An issue was discovered in Logpoint before 7.4.0. It allows Local File Inclusion (LFI) when an arbitrary File Path is used within the File System Collector. The content of the file specified can be viewed in the incoming logs.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-73

Affected software

VendorProductVersions
n/an/an/a
logpointlogpoint>= -, < 7.4.0

References

Timeline

Published
May 7, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-338627.5A buffer-management vulnerability in OPC Foundation OPCFoundation.NetStandard.Opc.Ua.Core before 1.05.374.54 could allow remote attackers toCVE-2024-338639.8An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/Cdn/GetFile local file inclusion.CVE-2024-338645.9An issue was discovered in linqi before 1.4.0.1 on Windows. There is SSRF via Document template generation; i.e., via remote images in proceCVE-2024-338657.5An issue was discovered in linqi before 1.4.0.1 on Windows. There is an NTLM hash leak via the /api/Cdn/GetFile and /api/DocumentTemplate/{GCVE-2024-338665.5An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/DocumentTemplate/{GUID] XSS.CVE-2024-338674.8An issue was discovered in linqi before 1.4.0.1 on Windows. There is a hardcoded password salt.CVE-2024-338689.8An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection.CVE-2024-338695.3An issue was discovered in Artifex Ghostscript before 10.03.1. Path traversal and command execution can occur (via a crafted PostScript docuCVE-2024-33875.9A weak (low bit strength) device certificate in Palo Alto Networks Panorama software enables an attacker to perform a meddler-in-the-middle CVE-2024-338706.3An issue was discovered in Artifex Ghostscript before 10.03.1. There is path traversal (via a crafted PostScript document) to arbitrary fileCVE-2024-338718.8An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver lCVE-2024-338729.8Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in code execution and escalation of
CVE-2024-33860: Medium severity, CVSS 6.5 | Vulnix