CVE-2025-64349
ELOG user profile missing authorization
Résumé
ELOG user profile missing authorization
Description d'origine
La description telle que publiée par la source (souvent en anglais).
ELOG allows an authenticated user to modify another user's profile. An attacker can edit a target user's email address, then request a password reset, and take control of the target account. By default, ELOG is not configured to allow self-registration.
Références
- advisory github.com
- advisory nvd.nist.gov
- patch bitbucket.org
- patch bitbucket.org
- web raw.githubusercontent.com
- web cve.org