What is CVE-2025-64349?

CVE-2025-64349 is a high-severity vulnerability in Elog, classified under Missing Authorization. CVSS score: 8.8/10. Published 2025-10-31.

How severe is CVE-2025-64349?

High severity. CVSS v3 base score is 8.8 out of 10.

Auth bypass in Elog

CVE-2025-64349

ELOG allows an authenticated user to modify another user's profile. An attacker can edit a target user's email address, then request a password reset, and take control of the target account. By default, ELOG is not configured to allow self…

Vulnerability class: Broken Access Control

EPSS: 0.003 (26.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

9119a7d8-5eab-497f-8521-727c672e3725 (Patch)
9119a7d8-5eab-497f-8521-727c672e3725 (Patch)
9119a7d8-5eab-497f-8521-727c672e3725 (Third Party Advisory)
9119a7d8-5eab-497f-8521-727c672e3725 (Third Party Advisory)

Frequently asked questions

What is CVE-2025-64349?: CVE-2025-64349 is a high-severity vulnerability in Elog, classified under Missing Authorization. CVSS score: 8.8/10. Published 2025-10-31.
How severe is CVE-2025-64349?: High severity. CVSS v3 base score is 8.8 out of 10.