CVE-2022-31178
Improper Authorization in eLabFTW
Résumé
Improper Authorization in eLabFTW
Description d'origine
La description telle que publiée par la source (souvent en anglais).
eLabFTW is an electronic lab notebook manager for research teams. A vulnerability was discovered which allows a logged in user to read a template without being authorized to do so. This vulnerability has been patched in 4.3.4. Users are advised to upgrade. There are no known workarounds for this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov