CVE-2022-31178 Information

Description

eLabFTW is an electronic lab notebook manager for research teams. A vulnerability was discovered which allows a logged in user to read a template without being authorized to do so. This vulnerability has been patched in 4.3.4. Users are advised to upgrade. There are no known workarounds for this issue.

Reference

https://github.com/elabftw/elabftw/security/advisories/GHSA-63qq-hw97-8q7x