CVE-2019-3996: Elog Project Elog

Medium severity, CVSS 6.5. EPSS: 6.6% chance of exploitation in the next 30 days.

ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests.

Affected products

• Elog Project Elog: up to and including 3.1.4-57bea22
• Fedoraproject Fedora: version 30 only; version 31 only

Published 2019-12-17. Last modified 2026-06-17.