CVE-2021-32698

    Dashboard / Vulnerabilities / CVE-2021-32698

    CVE-2021-32698

    Published: 21 Jun 2021Last Modified: 9 Jul 2026

    Summary:

    Details: eLabFTW is an open source electronic lab notebook for research labs. This vulnerability allows an attacker to make GET requests on behalf of the server. It is "blind" because the attacker cannot see the result of the request. Issue has been patched in eLabFTW 4.0.0.

    References: https://github.com/elabftw/elabftw/commit/3d2db4d3ad90b0915f29f05aeba41eaaf6a7c726, https://github.com/elabftw/elabftw/security/advisories/GHSA-mh6g-62p8-26m4

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -a42d2d9fb2e13fd8dcf6148021d473248fb574db

    Affected versions

    4.0.0-beta6
    4.0.0-beta5
    4.0.0-beta4
    4.0.0-beta3
    4.0.0-beta2
    4.0.0-beta
    4.0.0-alpha2
    4.0.0-alpha

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-32698 | CVE-DB