What the vulnerability does

01Description

An issue was discovered in Logpoint UniversalNormalizer before 5.7.0. Authenticated users can inject payloads while creating Universal Normalizer. These are executed, leading to Remote Code Execution.

Key dates

02Disclosure timeline

December 16, 2024 CVE published
December 23, 2024 Record updated