Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-31178

Опубликовано: 01 авг. 2022
Источник: nvd
CVSS3: 4.3
EPSS Низкий

Описание

eLabFTW is an electronic lab notebook manager for research teams. A vulnerability was discovered which allows a logged in user to read a template without being authorized to do so. This vulnerability has been patched in 4.3.4. Users are advised to upgrade. There are no known workarounds for this issue.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:elabftw:elabftw:*:*:*:*:*:*:*:*
Версия до 4.3.4 (исключая)

EPSS

Процентиль: 37%
0.0016
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-863

EPSS

Процентиль: 37%
0.0016
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-863