CVE-2022-31178

Description

eLabFTW is an electronic lab notebook manager for research teams. A vulnerability was discovered which allows a logged in user to read a template without being authorized to do so. This vulnerability has been patched in 4.3.4. Users are advised to upgrade. There are no known workarounds for this issue.

Related CPE's

References

https://github.com/elabftw/elabftw/security/advisories/GHSA-63qq-hw97-8q7x

CvssV3 impact

CvssV2 impact