PT-2019-16837 · Elog · Elog
CVE-2019-3996
·
Published
2019-12-17
·
Updated
2023-02-01
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
ELOG versions 3.1.4-57bea22 and below
Description
The issue allows unauthenticated remote attackers to use the software as an HTTP GET request proxy by sending crafted HTTP POST requests.
Recommendations
For versions 3.1.4-57bea22 and below, consider restricting access to the HTTP POST request handling functionality until a fix is available.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Elog