📦 Zrlog

This CVE describes a Server-Side Request Forgery (SSRF) vulnerability in zrlog v3.1.5 that allows attackers to make arbitrary HTTP requests from the vulnerable server. Attackers can exploit this to ac...

CVE-2020-27514 is a directory traversal vulnerability in ZrLog's admin API that allows remote attackers to delete arbitrary files on the server. This can lead to denial of service by deleting critical...

CVE-2021-44093 is a critical remote command execution vulnerability in zrlog 2.2.2 that allows attackers to bypass file upload restrictions and upload malicious JSP files to gain web shell access. Thi...