VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Dec 17, 2019· Updated Jun 17, 2026

CVE-2019-3996

CVE-2019-3996

Description

ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Elog/Elog2 versions
    cpe:2.3:a:elog_project:elog:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:elog_project:elog:*:*:*:*:*:*:*:*range: <=3.1.4-57bea22
    • (no CPE)range: <=3.1.4-57bea22
  • Fedoraproject/Fedora2 versions
    cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
  • ELOG/ELOGdescription

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.