Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 23 of 237  Not logged in ELOG logo
icon4.gif   Last default time bug, posted by Sebastian Schenk on Mon Mar 1 16:02:02 2021 
Hello all,

I have the issue, that we can't list entries older than 1 year, if "Last default = 31" (or any other number, but
they are restricted to 1, 3, 7, 31, 92, 182, 364) is active.
icon5.gif   Path disclosure on unfound file, posted by Bruce Bush on Wed May 6 17:35:14 2015 
Greetings,

  Running elog 3.1.0 on CentOS 6.6.  When I try to access a nonexistent file, elog reveals a path in the 404 page.  For example:

Not Found

The requested file /usr/local/elog/themes/default/blortblortblort7854.htm
    icon2.gif   Re: Path disclosure on unfound file, posted by Stefan Ritt on Wed Jun 10 09:12:06 2015 Screen_Shot_2015-06-10_at_9.11.38_.png
What URL did you use? If I try here on this forum I get:



which looks fine to me.
       icon2.gif   Re: Path disclosure on unfound file, posted by Travis Unkel on Fri Aug 18 01:02:41 2017 
I am having the same issue. If you go to midas.psi.ch/elogs/12345.htm you get the path disclosure issue.

 




Stefan
          icon2.gif   Re: Path disclosure on unfound file, posted by prinnydood on Thu Dec 31 18:35:19 2020 no_extension.pngnonexistent_html.pngrandom_extension.pngvalid_html_file_with_html_extension.png
I can confirm this issue exists on version 3.1.3, which I have installed elog on Debian 10.

The issue also exists on version 3.14 (1.20190113git283534d97d5a.el7), which I tested on an AmazonLinux EC2 instance.

This is what I found:
             icon2.gif   Re: Path disclosure on unfound file, posted by Stefan Ritt on Fri Jan 8 13:47:14 2021 Screenshot_2021-01-08_at_13.46.02_.png
Ok, I fixed the code in the current commit (395e101add19f0fe8a11a25d0822e511f34d94d1). The path gets stripped, and we see a






prinnydood
                icon2.gif   Re: Path disclosure on unfound file, posted by Gabriel Lopez on Wed Feb 3 17:28:16 2021 
Hello, This is coming up as a high vulnerability in our scans. Are there plans to update the rpm for this fix? If so is there an ETA? Any update would
be much appreciated. Currently running elog-3.1.4-2 




Stefan
                   icon2.gif   Re: Path disclosure on unfound file, posted by Stefan Ritt on Fri Feb 19 09:59:04 2021 
I made a new RPM: https://elog.psi.ch/elog/download/RPMS/elog-3.1.4-3.el7.x86_64.rpm




Gabriel
Lopez wrote:



Hello, This is coming up as a high vulnerability in our scans. Are
                      icon2.gif   Re: Path disclosure on unfound file, posted by Gabriel Lopez on Fri Feb 19 19:48:11 2021 
Thank you for your work. Works like a charm!




Stefan
Ritt wrote:



I made a new RPM: https://elog.psi.ch/elog/download/RPMS/elog-3.1.4-3.el7.x86_64.rpm
icon5.gif   export/archive a logbook, posted by Jacky Li on Thu Feb 18 19:21:57 2021 
Hi,

I have an elogd server serves many logbooks.  May I know what is a good way to export or achive one its logbooks?  Thank you.

Jacky
    icon2.gif   Re: export/archive a logbook, posted by Stefan Ritt on Fri Feb 19 08:35:53 2021 
Find -> Export to: CSV (or any other format) -> Search




Jacky
Li wrote:



Hi,
icon5.gif   elog server go to high CPU and hangs, posted by Stefano Lacaprara on Thu Feb 18 09:14:28 2021 
Dear expert,
  I'm running the latest git version of elog ELOG V3.1.4-395e101a on ubuntu 20.04.2.
I'm experiencing frequent hangs of the elog server: the status is always reported as running, but the web server is not responding.
    icon2.gif   Re: elog server go to high CPU and hangs, posted by David Pilgram on Thu Feb 18 12:05:52 2021 
Dear Stefano,

Try the entry I wrote some time ago elog:68655
    icon2.gif   Re: elog server go to high CPU and hangs, posted by Stefan Ritt on Thu Feb 18 12:06:12 2021 
Usually a restart of the elogd server helps. If the problem persists, one of the logbooks might be corrupt. Try to disable one logbook at a time to figure
out which one it is. Then 
remove that one and set it up freshly.
icon5.gif   Different Top Groups or Groups have the same logbook name , posted by MATT TERRON on Tue Feb 2 04:01:21 2021 
I have built different top groups for different departments. But occasionally these different top groups have the same logbook name, say 'Maintenance
Log'. So is there a way I can have the same logbook name under different 'Top Groups', rather than rename these logbooks as 'Department1
Maintenance Log' all the way to 'Department_X Maintenance Log'?
    icon2.gif   Re: Different Top Groups or Groups have the same logbook name , posted by Stefan Ritt on Tue Feb 2 07:43:49 2021 
Unfortunately you have to name these top groups differently, because they are internally used for the database name.




MATT
TERRON wrote:



I have built different top groups for different departments. But occasionally
       icon2.gif   Re: Different Top Groups or Groups have the same logbook name , posted by MATT TERRON on Tue Feb 2 08:17:15 2021 
So both Top Group names and Logbook names should be unique inside one .cfg file, is that correct?




Stefan
Ritt wrote:



Unfortunately you have to name these top groups differently, because
       icon2.gif   Re: Different Top Groups or Groups have the same logbook name , posted by Stefan Ritt on Tue Feb 2 08:25:46 2021 
That's correct.




Stefan
Ritt wrote:



Unfortunately you have to name these top groups differently, because
icon5.gif   elog slowness, posted by Giuseppe Cucinotta on Thu Jan 14 11:43:00 2021 
We run elog on a server to provide a logbook for our laboratory. We noticed that elog is very slow on loading pages: browser pages spend a lot of
time in charging (actually one can speed the procedure refreshing the page but it is quite annoying).

I checked the server load with top and it doesn't show any abnormal CPU or memory usage. Then I ran lsof and I noticed that there are
    icon2.gif   Re: elog slowness, posted by Stefan Ritt on Thu Jan 14 14:05:19 2021 
Have you tried to restart the elogd server? The CLOSE_WAIT could be dangling network connections, which were not properly closed by the browser.




Giuseppe
Cucinotta wrote:



We run elog on a server to provide a logbook for our laboratory.
icon5.gif   hidden files, posted by Lahreche Abdelmadjid on Sun Jan 10 11:13:31 2021 
Hello;

Could I make change on program only on the " elogd.cfg" ?

Or is there onother files, because I think there is hidden files ?
icon5.gif   outdated debian package, posted by Chris Körner on Fri Dec 18 18:08:54 2020 
Hi everyone,

I am currently trying to setup elog as a docker container. I wonder if there is any reason why the elog debian package is stuck at version 3.1.3?
Would it be possible to update it to the latest version? 
ELOG V3.1.5-3fb85fa6