ELOG file upload stored XSS
Priority LOW 39CWE-434Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- Passive
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Code execution, Cross-site scripting
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-434 and CWE-79.
Summary
ELOG allows an authenticated user to upload arbitrary HTML files. The HTML content is executed in the context of other users when they open the file. Because ELOG includes usernames and password hashes in certain HTTP requests, an attacker can obtain the target's credentials and replay them or crack the password hash offline. In ELOG 3.1.5-20251014 release, HTML files are rendered as plain text.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00319 24th percentileScored 2026-11-07
Fix Fixed ELOG (ELOG): 3.1.5-20251014
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| ELOG | ELOG | before 3.1.5-20251014 | 3.1.5-20251014 | Patch available | CNA |
- ELOG VendorELOG Affected before 3.1.5-20251014 Fixed in 3.1.5-20251014 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:elog_project:elog:*:*:*:*:*:*:*:* | before 3.1.5-20251014 | Vulnerable | Elog Project |
- cpe:2.3:a:elog_project:elog:*:*:*:*:*:*:*:* Versions before 3.1.5-20251014 Vulnerable ·Elog Project
Remediation
- Fix · CNA ELOG (ELOG) Fixed in 3.1.5-20251014
Timeline
- 2026-10-02 Threatist record created from CVE-2025-62618
- 2026-10-03 Alias added: GHSA-9wg9-fwv6-cgcr
More ELOG vulnerabilities
- TI-2008-06692 Buffer overflow in Electronic Logbook (ELOG) before 2.7.1 has unknown impact and attack… CVSS 2.0HIGH 10.0
- TI-2005-04182 Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of… CVSS 2.0HIGH 7.8
- TI-2025-39782 ELOG user profile missing authorization CVSS 4.0HIGH 8.7
- TI-2025-39781 ELOG configuration file authorization bypass CVSS 4.0CRITICAL 9.3
- TI-2020-07113 NULL pointer dereference in ELOG Electronic Logbook CVSS 3.1HIGH 7.5
- TI-2008-00420 The replace_inline_img function in elogd in Electronic Logbook (ELOG) before 2.7.1 allows… CVSS 2.0MEDIUM 5.0
Sources
- CVE-2025-62618 · CVE Program
- CVE-2025-62618 · NVD
- FIRST EPSS
- GHSA-9wg9-fwv6-cgcr · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences