PT-2021-19864
CVE-2021-32698
·
تاريخ النشر
2021-06-21
·
تاريخ التحديث
2021-06-28
الوصف من
CVSS 3.1
6.8
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
eLabFTW versions prior to 4.0.0
Description
This issue affects an open source electronic lab notebook for research labs, allowing an attacker to make GET requests on behalf of the server. The attack is "blind" because the attacker cannot see the result of the request.
Recommendations
For versions prior to 4.0.0, update to version 4.0.0 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾