CVE-2024-33858

{"id": "CVE-2024-33858", "metrics": {}, "published": "2024-05-07T16:15:08.147", "references": [{"url": "https://servicedesk.logpoint.com/hc/en-us/articles/18533668045725-Path-Injection-on-Enrichment-Sources-leading-to-arbitrary-file-write-in-tmp-folder", "source": "cve@mitre.org"}, {"url": "https://www.logpoint.com/", "source": "cve@mitre.org"}], "vulnStatus": "Awaiting Analysis", "descriptions": [{"lang": "en", "value": "An issue was discovered in Logpoint before 7.4.0. A path injection vulnerability is seen while adding a CSV enrichment source. The source_name parameter could be changed to an absolute path; this will write the CSV file to that path inside the /tmp directory."}], "lastModified": "2024-05-07T20:07:58.737", "sourceIdentifier": "cve@mitre.org"}