Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-62189 EUVD-2025-198420GHSA-hww3-8vh8-6jhg

LogStare Collector contains an incorrect authorization vulnerability in UserRegistration. If exploited, a non-administrative user may creat…

Published Nov 21, 2025 · Updated Nov 21, 2025 · Assigned by jpcert

Vendor: LogStare Product: LogStare Collector (for Linux) Product: LogStare Collector (for Windows) Platform: Linux Platform: Windows

Description

LogStare Collector contains an incorrect authorization vulnerability in UserRegistration. If exploited, a non-administrative user may create a new user account by sending a crafted HTTP request.

Affected products

VendorProductAffectedFixed
LogStare LogStare Collector (for Windows) 2.4.1 and earlier —
LogStare LogStare Collector (for Linux) 2.4.1 and earlier —

References