Elabftw vulnerabilities
We track 4 vulnerabilities in Elabftw products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on February 14, 2025.
Latest Elabftw vulnerabilities
- 8.8 High severity
elabftw: Improper Neutralization of Special Elements used in an SQL Command
eLabFTW is an open source electronic lab notebook for research labs. Prior to version 5.1.15, an incorrect input validation could allow an authenticated user to read sensitive information, including login token or other content stored in the database. This cou
- 7.8 High severity
elabftw: Authentication Bypass Using an Alternate Path or Channel
eLabFTW is an open source electronic lab notebook for research labs. A vulnerability has been found starting in version 4.6.0 and prior to version 5.1.0 that allows an attacker to bypass eLabFTW's built-in multifactor authentication mechanism. An attacker who
- 8.8 High severity
elabftw: Incorrect Privilege Assignment
eLabFTW is an open source electronic lab notebook for research labs. In the context of eLabFTW, an administrator is a user account with certain privileges to manage users and content in their assigned team/teams. A user may be an administrator in one team and
- 7.2 High severity
elabftw: Placement of User into Incorrect Group
eLabFTW is an electronic lab notebook manager for research teams. Prior to version 4.3.0, a vulnerability allows an authenticated user with an administrator role in a team to assign itself system administrator privileges within the application, or create a new