High severity7.5NVD Advisory· Published Mar 23, 2020· Updated Jun 17, 2026
CVE-2020-8859
CVE-2020-8859
Description
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of ELOG Electronic Logbook 3.1.4-283534d. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of HTTP parameters. A crafted request can trigger the dereference of a null pointer. An attacker can leverage this vulnerability to create a denial-of-service condition. Was ZDI-CAN-10115.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- ELOG/Electronic Logbookv5Range: 3.1.4-283534d
- Range: = 3.1.4-283534d
- cpe:2.3:a:psi:electronic_logbook:3.1.4-283534d:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- elog.psi.ch/elogs/Forum/69114nvdVendor Advisory
- www.zerodayinitiative.com/advisories/ZDI-20-252/nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.