CVE-2019-3996CWE-441

ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests

published December 17, 2019

CVSS
—
EPSS
7%
Percentile
93.8
In the wild
Unconfirmed
What it is

ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06574 · 93.8th percentile
Weakness
CWE-441 · Unintended Proxy or Intermediary ('Confused Deputy')
Published
2019-12-17T21:59Z
EPSS history
Timeline
  • 17 DEC 21:59Z
    ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests
    cvelistv5