CVE-2025-64349 — ELOG user profile missing authorization
ELOG allows an authenticated user to modify another user's profile. An attacker can edit a target user's email address, then request a password reset, and take control of the ta…
Published: 2025-10-31 · CVSS: 8.7 · CVSS 4.0
ELOG allows an authenticated user to modify another user's profile. An attacker can edit a target user's email address, then request a password reset, and take control of the target account. By default, ELOG is not configured to allow self-registration.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7