CVE-2025-64348

Mô tả

Tham khảo

• bitbucket.org/ritt/elog/commits/7092ff64f6eb9521f8cc8c52272a020bf3730946 · Patch
• bitbucket.org/ritt/elog/commits/f81e5695c40997322fe2713bfdeba459d9de09dc · Patch
• raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-304-01.json · Third Party Advisory
• cve.org/CVERecord · Third Party Advisory

Lỗ hổng khác của elog

• CVE-2025-64349CAO 8.8ELOG allows an authenticated user to modify another user's profile. An attacker can edit a target user's email address, then request a passw…
• CVE-2025-62618CAO 8.0ELOG allows an authenticated user to upload arbitrary HTML files. The HTML content is executed in the context of other users when they open …
• CVE-2019-3996TRUNG BÌNH 6.5ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests.
• CVE-2019-3995CAO 7.5ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a NULL pointer dereference. A remote unauthenticated at…
• CVE-2019-3994CAO 7.5ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free. A remote unauthenticated attacker can…