CVE-2019-3993: Elog Project Elog

High severity, CVSS 7.5. EPSS: 45.7% chance of exploitation in the next 30 days.

ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can recover a user's password hash by sending a crafted HTTP POST request.

Affected products

• Elog Project Elog: up to and including 3.1.4-57bea22
• Fedoraproject Fedora: version 30 only; version 31 only

Published 2019-12-17. Last modified 2026-06-17.