elabftw kayıtları

elabftw üreticisine ait 17 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 1
Düzeltme kaydı olan: %23,5
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

17 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2019-12185Kavram kanıtı	eLabFTW 1.8.5 is vulnerable to arbitrary file uploads via the /app/controllers/EntityController.php component.elabftw · elabftw · CWE-434 RCE Dosya yükleme	Yüksek8,8	—	%17,3	19 May 2019
39İzleyin	CVE-2021-43834İstismar yok	Incorrect Authentication in elabftwelabftw · elabftw · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%1,0	15 Ara 2021
36İzleyin	CVE-2022-31007Kavram kanıtı	Privilege escalation from administrator in eLabFTWelabftw · elabftw · CWE-842	Yüksek7,2	—	%26,9	31 May 2022
36İzleyin	CVE-2021-41171İstismar yok	Bypass bruteforce protection on login form in elabftwelabftw · elabftw · CWE-307	Yüksek8,8	—	%1,9	22 Eki 2021
35İzleyin	CVE-2021-43833İstismar yok	Account takeover in eLabFTWelabftw · elabftw · CWE-287 Kimlik doğrulama atlatma	Yüksek8,8	—	%0,8	15 Ara 2021
35İzleyin	CVE-2025-25206İstismar yok	Incorrect input validation could allow an authenticated user to read sensitive informationelabftw · elabftw · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,5	14 Şub 2025
35İzleyin	CVE-2024-25632İstismar yok	Unauthorised granting of administrator privileges over arbitrary teams under certain circumstanceselabftw · elabftw · CWE-266	Yüksek8,8	—	%0,4	1 Eki 2024
31İzleyin	CVE-2024-52586İstismar yok	eLabFTW is an open source electronic lab notebook for research labs.elabftw · elabftw · CWE-288 Kimlik doğrulama atlatma	Yüksek7,8	—	%0,2	9 Ara 2024
26İzleyin	CVE-2024-45408İstismar yok	eLabFTW contains a direct and indirect information disclosureelabftw · elabftw · CWE-284 Erişim denetimi (IDOR)	Orta6,5	—	%0,4	1 Eki 2024
24İzleyin	CVE-2024-47826İstismar yok	eLabFTW vulnerable to HTML Injection in extended search error messageelabftw · elabftw · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,3	14 Eki 2024
23İzleyin	CVE-2026-28510İstismar yok	elabftw allows MFA bypass during loginelabftw · elabftw · CWE-302 Kimlik doğrulama atlatma	Orta5,9	—	%0,4	5 May 2026
21İzleyin	CVE-2017-1000478İstismar yok	ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of Javelabftw · elabftw · CWE-79 XSS	Orta5,4	—	%0,8	3 Oca 2018
21İzleyin	CVE-2024-28100İstismar yok	Stored Cross-site Scripting leading to arbitrary actions taken on behalf of users in elabftwelabftw · elabftw · CWE-79 XSS	Orta5,4	—	%0,3	2 Eyl 2024
21İzleyin	CVE-2024-25633İstismar yok	In eLabFTW, if administrators can create users, users can tooelabftw · elabftw · CWE-266	Orta5,4	—	%0,2	15 Ağu 2024
19İzleyin	CVE-2021-32698İstismar yok	Blind Server-Side Request Forgery (SSRF) in eLabFTWelabftw · elabftw · CWE-918 SSRF	Orta4,9	—	%0,9	21 Haz 2021
17İzleyin	CVE-2022-31178İstismar yok	Improper Authorization in eLabFTWelabftw · elabftw · CWE-863 Erişim denetimi (IDOR)	Orta4,3	—	%0,5	1 Ağu 2022
17İzleyin	CVE-2026-28511İstismar yok	elabftw has entry title leakage through autocompletion searchelabftw · elabftw · CWE-200 Bilgi sızıntısı	Orta4,3	—	%0,3	1 Haz 2026

CVE-2019-12185
40Planlayın
eLabFTW 1.8.5 is vulnerable to arbitrary file uploads via the /app/controllers/EntityController.php component.
YüksekCVSS 8,8Kavram kanıtıEPSS %17
- RCE
- Dosya yükleme
elabftw · elabftw19 May 2019
CVE-2021-43834
39İzleyin
Incorrect Authentication in elabftw
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
elabftw · elabftw15 Ara 2021
CVE-2022-31007
36İzleyin
Privilege escalation from administrator in eLabFTW
YüksekCVSS 7,2Kavram kanıtıEPSS %27
elabftw · elabftw31 May 2022
CVE-2021-41171
36İzleyin
Bypass bruteforce protection on login form in elabftw
YüksekCVSS 8,8İstismar yokEPSS %2
elabftw · elabftw22 Eki 2021
CVE-2021-43833
35İzleyin
Account takeover in eLabFTW
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulama atlatma
elabftw · elabftw15 Ara 2021
CVE-2025-25206
35İzleyin
Incorrect input validation could allow an authenticated user to read sensitive information
YüksekCVSS 8,8İstismar yokEPSS %0
- SQL enjeksiyonu
elabftw · elabftw14 Şub 2025
CVE-2024-25632
35İzleyin
Unauthorised granting of administrator privileges over arbitrary teams under certain circumstances
YüksekCVSS 8,8İstismar yokEPSS %0
elabftw · elabftw1 Eki 2024
CVE-2024-52586
31İzleyin
eLabFTW is an open source electronic lab notebook for research labs.
YüksekCVSS 7,8İstismar yokEPSS %0
- Kimlik doğrulama atlatma
elabftw · elabftw9 Ara 2024
CVE-2024-45408
26İzleyin
eLabFTW contains a direct and indirect information disclosure
OrtaCVSS 6,5İstismar yokEPSS %0
- Erişim denetimi (IDOR)
elabftw · elabftw1 Eki 2024
CVE-2024-47826
24İzleyin
eLabFTW vulnerable to HTML Injection in extended search error message
OrtaCVSS 6,1İstismar yokEPSS %0
- pre-auth RCE
- XSS
elabftw · elabftw14 Eki 2024
CVE-2026-28510
23İzleyin
elabftw allows MFA bypass during login
OrtaCVSS 5,9İstismar yokEPSS %0
- Kimlik doğrulama atlatma
elabftw · elabftw5 May 2026
CVE-2017-1000478
21İzleyin
ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of Jav
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
elabftw · elabftw3 Oca 2018
CVE-2024-28100
21İzleyin
Stored Cross-site Scripting leading to arbitrary actions taken on behalf of users in elabftw
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
elabftw · elabftw2 Eyl 2024
CVE-2024-25633
21İzleyin
In eLabFTW, if administrators can create users, users can too
OrtaCVSS 5,4İstismar yokEPSS %0
elabftw · elabftw15 Ağu 2024
CVE-2021-32698
19İzleyin
Blind Server-Side Request Forgery (SSRF) in eLabFTW
OrtaCVSS 4,9İstismar yokEPSS %1
- SSRF
elabftw · elabftw21 Haz 2021
CVE-2022-31178
17İzleyin
Improper Authorization in eLabFTW
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
elabftw · elabftw1 Ağu 2022
CVE-2026-28511
17İzleyin
elabftw has entry title leakage through autocompletion search
OrtaCVSS 4,3İstismar yokEPSS %0
- Bilgi sızıntısı
elabftw · elabftw1 Haz 2026