Security Advisory

CVE-2020-8859

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-03-23 20:25:22

Last updated 2024-08-04 10:12:10

Assigner zdi

CVSS score 5.3

State PUBLISHED

Description

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of ELOG Electronic Logbook 3.1.4-283534d. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of HTTP parameters. A crafted request can trigger the dereference of a null pointer. An attacker can leverage this vulnerability to create a denial-of-service condition. Was ZDI-CAN-10115.

← Browse all CVEs View on cve.org ↗