CVE-2025-54316

Description

An issue was discovered in Logpoint before 7.6.0. When creating reports, attackers can create custom Jinja templates that chained built-in filter functions to generate XSS payloads. These payloads can be rendered by the Logpoint Report Template engine, making it vulnerable to cross-site scripting (XSS) attacks.

PUBLISHED Reserved 2025-07-20 | Published 2025-07-20 | Updated 2025-07-30 | Assigner mitre

Problem types

CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

Product status

References

servicedesk.logpoint.com/...-built-in-Jinja-filter-functions

servicedesk.logpoint.com/...s/7201103730845-Product-Security

cve.org (CVE-2025-54316)

nvd.nist.gov (CVE-2025-54316)

Download JSON