Unscored CVE-2017-1000478 EUVD-2017-1602GHSA-9f86-mv3h-fcpq

ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of Ja…

Published Jan 3, 2018 · Updated Sep 16, 2024 · Assigned by mitre

Description

ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service.

References

https://github.com/elabftw/elabftw/issues/531