Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2022-31178

Improper Authorization in eLabFTW

Description

eLabFTW is an electronic lab notebook manager for research teams. A vulnerability was discovered which allows a logged in user to read a template without being authorized to do so. This vulnerability has been patched in 4.3.4. Users are advised to upgrade. There are no known workarounds for this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

elabftw elabftw

  • < 4.3.4affected

References