PT-2021-19864
CVE-2021-32698
·
Published
2021-06-21
·
Updated
2021-06-28
Description by
CVSS 3.1
6.8
MediumMetricsAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
eLabFTW versions prior to 4.0.0
Description
This issue affects an open source electronic lab notebook for research labs, allowing an attacker to make GET requests on behalf of the server. The attack is "blind" because the attacker cannot see the result of the request.
Recommendations
For versions prior to 4.0.0, update to version 4.0.0 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾