CVE-2022-31178

Summary

eLabFTW is an electronic lab notebook manager for research teams. A vulnerability was discovered which allows a logged in user to read a template without being authorized to do so. This vulnerability has been patched in 4.3.4. Users are advised to upgrade. There are no known workarounds for this issue.

Affected Software

Weaknesses

• CWE-863: CWE-863: Incorrect Authorization

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/elabftw/elabftw/security/advisories/GHSA-63qq-hw97-8q7x

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/elabftw/elabftw/security/advisories/GHSA-63qq-hw97-8q7x

• ←Previous
• Next→