Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-31178 EUVD-2022-52778

Improper Authorization in eLabFTW

Published Aug 1, 2022 · Updated Apr 23, 2025 · Assigned by GitHub_M

Description

eLabFTW is an electronic lab notebook manager for research teams. A vulnerability was discovered which allows a logged in user to read a template without being authorized to do so. This vulnerability has been patched in 4.3.4. Users are advised to upgrade. There are no known workarounds for this issue.

Affected products

VendorProductAffectedFixed
elabftw elabftw < 4.3.4 —

References