CVE-2022-31178 — Improper Authorization in eLabFTW

CVE-2022-31178

Improper Authorization in eLabFTW PUBLISHED

Description (CNA)

eLabFTW is an electronic lab notebook manager for research teams. A vulnerability was discovered which allows a logged in user to read a template without being authorized to do so. This vulnerability has been patched in 4.3.4. Users are advised to upgrade. There are no known workarounds for this issue.

Affected (CNA)

Vendor / product	Versions
elabftw / elabftw	affected < 4.3.4

CWE

CWE-863

References

https://github.com/elabftw/elabftw/security/advisories/GHSA-63qq-hw97-8q7x

ADP enrichment

CVE

No English description supplied.

https://github.com/elabftw/elabftw/security/advisories/GHSA-63qq-hw97-8q7x

CISA-ADP

No English description supplied.

No references supplied.