PT-2024-31612
CVE-2024-45408
·
Published
2024-10-01
·
Updated
2024-10-04
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
eLabFTW versions prior to 5.1.0
Description:
An incorrect permission check in eLabFTW, an open source electronic lab notebook, could allow an authenticated user to access restricted information. If anonymous access is enabled, this issue extends to anyone.
Recommendations:
For versions prior to 5.1.0, upgrade to at least version 5.1.0.
As a temporary workaround, system administrators can disable anonymous access in the System configuration panel.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾