CVE-2019-3996

CVE-2019-3996

Vendor N/A

Product ELOG

Weakness CWE-441

Published December 17, 2019

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests.

Key dates

02Disclosure timeline

December 17, 2019 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-3996 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/441.html

Related vulnerabilities

04Related CVE

CVE-2026-33768 Astro: Unauthenticated Path Override via `x-astro-path` / `x_astro_path` CVE-2022-39349 Tasks.org vulnerable to data exfiltration by malicous app or adb CVE-2026-42313 pyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxy CVE-2026-6993 go-kratos http.DefaultServeMux Fallback server.go NewServer confused deputy CVE-2026-39906 Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via .NET Remoting