CVE-2022-31178

eLabFTW is an electronic lab notebook manager for research teams. A vulnerability was discovered which allows a logged in user to read a template without being authorized to do so. This vulnerability has been patched in 4.3.4. Users are advised to upgrade. There are no known workarounds for this issue.

• CWE-863

• https://github.com/elabftw/elabftw/security/advisories/GHSA-63qq-hw97-8q7xThird Party Advisory
• https://github.com/elabftw/elabftw/security/advisories/GHSA-63qq-hw97-8q7xThird Party Advisory

Published

Aug 1, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-31171Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-31172OpenZeppelin Contracts is a library for smart contract devel…7.5
• CVE-2022-31173Juniper is a GraphQL server library for Rust. Affected versi…7.5
• CVE-2022-31175CKEditor 5 is a JavaScript rich text editor. A cross-site sc…4.7
• CVE-2022-31176Grafana Image Renderer is a Grafana backend plugin that hand…8.1
• CVE-2022-31177Flask-AppBuilder is an application development framework bui…2.7
• CVE-2022-31179Shescape is a simple shell escape package for JavaScript. Ve…9.8
• CVE-2022-3118A vulnerability was found in Sourcecodehero ERP System Proje…9.8
• CVE-2022-31180Shescape is a simple shell escape package for JavaScript. Af…9.8
• CVE-2022-31181PrestaShop is an Open Source e-commerce platform. In version…9.8
• CVE-2022-31182Discourse is the an open source discussion platform. In affe…5.3
• CVE-2022-31183fs2 is a compositional, streaming I/O library for Scala. Whe…9.8