eLabFTW is an electronic lab notebook manager for research teams. A vulnerability was discovered which allows a logged in user to read a template without being authorized to do so. This vulnerability has been patched in 4.3.4. Users are advised to upgrade. There are no known workarounds for this issue.
References
| Link | Resource |
|---|---|
| https://github.com/elabftw/elabftw/security/advisories/GHSA-63qq-hw97-8q7x | Third Party Advisory |
Configurations
History
06 Aug 2022, 02:42
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
| References | (CONFIRM) https://github.com/elabftw/elabftw/security/advisories/GHSA-63qq-hw97-8q7x - Third Party Advisory | |
| CPE | cpe:2.3:a:elabftw:elabftw:*:*:*:*:*:*:*:* |
01 Aug 2022, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-863 | |
| Summary | eLabFTW is an electronic lab notebook manager for research teams. A vulnerability was discovered which allows a logged in user to read a template without being authorized to do so. This vulnerability has been patched in 4.3.4. Users are advised to upgrade. There are no known workarounds for this issue. |
01 Aug 2022, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-08-01 19:15
Updated : 2024-02-04 22:51
NVD link : CVE-2022-31178
Mitre link : CVE-2022-31178
CVE.ORG link : CVE-2022-31178
JSON object : View
Products Affected
elabftw
- elabftw
CWE
CWE-863
Incorrect Authorization