CVE-2025-64349 in ELOGinformación

Resumen

por MITRE • 2025-10-31

ELOG allows an authenticated user to modify another user's profile. An attacker can edit a target user's email address, then request a password reset, and take control of the target account. By default, ELOG is not configured to allow self-registration.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsable

Cisa-cg

Reservar

2025-10-30

Divulgación

2025-10-31

Moderación

aceptado

Artículo

VDB-330855

CPE

listo

EPSS

0.00350

KEV

no

Actividades

muy bajo

Fuentes

Do you know our Splunk app?

Download it now for free!