Skip to content
OpenAdvisories

Weakness (CWE)

CWE-842: Placement of User into Incorrect Group

Base Incomplete

The product or the administrator places a user into an incorrect group.

Source: MITRE CWE-842

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.9
    CVE-2022-31007 Public exploit EPSS 27%

    Privilege escalation from administrator in eLabFTW

    eLabFTW is an electronic lab notebook manager for research teams. Prior to version 4.3.0, a vulnerability allows an authenticated user with an administrator role in a team to assign itself system administrator privileges within the application, or create a ne…

    elabftw elabftw