CVE-2022-31178CWE-863

Improper Authorization in eLabFTW

Medium · published August 1, 2022

CVSS v3.1
4.3
EPSS
1%
Percentile
42.1
In the wild
Unconfirmed
What it is

eLabFTW is an electronic lab notebook manager for research teams. A vulnerability was discovered which allows a logged in user to read a template without being authorized to do so. This vulnerability has been patched in 4.3.4. Users are advised to upgrade. There are no known workarounds for this issue.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00503 · 42.1th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2022-08-01T19:10Z
EPSS history
Timeline
  • 01 AUG 19:10Z
    Improper Authorization in eLabFTW
    cvelistv5