CVE-2020-8859 - CVE House
Back to Database
Status published Medium CVE-2020-8859

This vulnerability allows remote attackers to create a denial-of-service condition...

Vulnerability Description

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of ELOG Electronic Logbook 3.1.4-283534d. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of HTTP parameters. A crafted request can trigger the dereference of a null pointer. An attacker can leverage this vulnerability to create a denial-of-service condition. Was ZDI-CAN-10115.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-8859

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Asif Akbar of Trend Micro Security Research

References

More from ELOG

View All →
CVE-2025-64349
ELOG user profile missing authorization
High 8.7
CVE-2025-64348
ELOG configuration file authorization bypass
Critical 9.3
CVE-2025-62618
ELOG file upload stored XSS
High 8.6

Affected Vendor

Affected Software

Electronic Logbook
Vulnerable Versions:
3.1.4-283534d

Timeline

Official Publish: March 23rd, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weaknesses (CWE)

CWE-476

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service
Impact
T1499.004 Application or System Exploitation
Impact
T1489 Service Stop
Impact
T1203 Exploitation for Client Execution
Execution
T1190 Exploit Public-Facing Application
Initial Access