Vulnerabilities

TI-2019-03000 CVE-2019-3996 · GHSA-2g3j-pp7m-869h

ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when…

LOW 38

ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.06574 Published 2019-12-17 No fix listed CWE-441

TI-2019-02999 CVE-2019-3995 · GHSA-vhqv-qjvq-7xpf

MEDIUM 56

ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a NULL pointer dereference.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.28547 Published 2019-12-17 No fix listed CWE-476

TI-2019-02998 CVE-2019-3994 · GHSA-8cv3-rqqw-vw5m

LOW 39

ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03278 Published 2019-12-17 No fix listed CWE-416

TI-2019-02997 CVE-2019-3993 · GHSA-7hmp-m42w-c587

MEDIUM 62

ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.45698 Published 2019-12-17 No fix listed CWE-200

TI-2019-02996 CVE-2019-3992 · GHSA-2378-x22r-cqpj

LOW 35

ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01301 Published 2019-12-17 No fix listed CWE-200