CVE-2025-64349
ELOG user profile missing authorization
概要
ELOG user profile missing authorization
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
ELOG allows an authenticated user to modify another user's profile. An attacker can edit a target user's email address, then request a password reset, and take control of the target account. By default, ELOG is not configured to allow self-registration.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- patch bitbucket.org
- patch bitbucket.org
- web raw.githubusercontent.com
- web cve.org