CVE-2025-64349 in ELOG
要約
〜によって MITRE • 2025年10月31日
ELOG allows an authenticated user to modify another user's profile. An attacker can edit a target user's email address, then request a password reset, and take control of the target account. By default, ELOG is not configured to allow self-registration.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.