CVE-2025-64349 in ELOGالمعلومات

الملخص

بحسب MITRE • 31/10/2025

ELOG allows an authenticated user to modify another user's profile. An attacker can edit a target user's email address, then request a password reset, and take control of the target account. By default, ELOG is not configured to allow self-registration.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

مسؤول

Cisa-cg

حجز

30/10/2025

إفشاء

31/10/2025

الاعتدال

تمت الموافقة

إدخال

VDB-330855

EPSS

0.00350

KEV

لا

النشاطات

منخفض جدًا

المصادر

Do you know our Splunk app?

Download it now for free!