Logpoint Cross-Site Scripting Vulnerability in Report Templates

A cross-site scripting (XSS) vulnerability has been identified in Logpoint versions prior to 7.6.0. This issue arises when creating reports, as attackers can design custom Jinja templates that combine built-in filter functions to produce XSS payloads. These payloads are then rendered by the Logpoint Report Template engine, allowing for XSS attacks.

Impact

Exploitation of this vulnerability allows for cross-site scripting attacks, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Remediation

Users are advised to upgrade to Logpoint version 7.6.0 or later.