Unrated severityNVD Advisory· Published Mar 23, 2020· Updated Aug 4, 2024
CVE-2020-8859
CVE-2020-8859
Description
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of ELOG Electronic Logbook 3.1.4-283534d. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of HTTP parameters. A crafted request can trigger the dereference of a null pointer. An attacker can leverage this vulnerability to create a denial-of-service condition. Was ZDI-CAN-10115.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- ELOG/Electronic Logbookv5Range: 3.1.4-283534d
Patches
Vulnerability mechanics
References
2- elog.psi.ch/elogs/Forum/69114mitrex_refsource_MISC
- www.zerodayinitiative.com/advisories/ZDI-20-252/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.