Approved changes feed: RSS · Atom
cpe:2.3:a:pinpoint-apm:pinpoint:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Pinpoint Apm (70c7a462-fc28-5f8a-bcd8-3d5696ecee39) |
|---|---|
| Product | Pinpoint (2cc2af52-a917-5616-a81d-c30f4dd4a2ec) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-57948 |
vulnerable | 2026-07-29 01:03:16.453688 |
Pinpoint - Insecure Session Cookie Attributes in pinpointJwt
MEDIUM (6.8)
Pinpoint through version 3.1.0 contains an insecure session management vulnerability that allows attackers to access the pinpointJwt session cookie due to missing HttpOnly and Secure attributes, enabling JavaScript access via document.cookie and cleartext transmission over HTTP. Attackers can exploit stored or reflected cross-site scripting vulnerabilities to exfiltrate the session token or intercept it through network sniffing to perform session hijacking.
Published: 2026-06-29T17:19:11.989Z
Updated: 2026-07-14T21:34:39.461Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-57947 |
vulnerable | 2026-07-29 01:03:16.452358 |
Pinpoint - Server-Side Request Forgery via Alarm Webhook Registration
HIGH (8.5)
Pinpoint through 3.1.0 contains a server-side request forgery vulnerability in the webhook registration endpoint that allows authenticated users to register internal URLs due to missing SSRF protection. Attackers can trigger alarm threshold breaches to force the server to issue POST requests to internal hosts and metadata endpoints, enabling unauthorized access to internal network resources.
Published: 2026-06-29T17:18:50.802Z
Updated: 2026-07-14T21:34:38.750Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.