medium4.3
CVE-2022-31178
eLabFTW is an electronic lab notebook manager for research teams.
Impact
eLabFTW is an electronic lab notebook manager for research teams. A vulnerability was discovered which allows a logged in user to read a template without being authorized to do so. This vulnerability has been patched in 4.3.4. Users are advised to upgrade. There are no known workarounds for this issue.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elabftw | Elabftw | before 4.3.4 |