NetSight
IP …
medium6.5

CVE-2019-3996

ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests.

Impact

ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests.

Affected products

VendorProductAffected versions
Elog ProjectElog
through 3.1.4-57bea22
FedoraprojectFedora
Versions 30, 31

Weakness classification

CWE-441CWE-610

References