This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of ELOG Electronic Logbook 3.1.4-283534d. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of HTTP parameters. A crafted request can trigger the dereference of a null pointer. An attacker can leverage this vulnerability to create a denial-of-service condition. Was ZDI-CAN-10115.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: zdi
Published: 2020-03-23T20:25:22
Updated: 2024-08-04T10:12:10.993Z
Reserved: 2020-02-11T00:00:00
Link: CVE-2020-8859
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-03-23T21:15:12.283
Modified: 2024-11-21T05:39:35.110
Link: CVE-2020-8859
Redhat
No data.