CVE-2022-31178: Elabftw

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

eLabFTW is an electronic lab notebook manager for research teams. A vulnerability was discovered which allows a logged in user to read a template without being authorized to do so. This vulnerability has been patched in 4.3.4. Users are advised to upgrade. There are no known workarounds for this issue.

Affected products

• Elabftw Elabftw: before 4.3.4 (fixed in 4.3.4)

Published 2022-08-01. Last modified 2026-06-17.