CVE-2025-64349

ELOG allows an authenticated user to modify another user’s profile. An attacker can edit a target user’s email address, then request a password reset, and take control of the target account. By default, ELOG is not configured to allow self-registration.

More information : https://bitbucket.org/ritt/elog/commits/7092ff64f6eb9521f8cc8c52272a020bf3730946