Vulnerability-Lookup

CVE-2026-28511 (GCVE-0-2026-28511)

Vulnerability from cvelistv5 – Published: 2026-06-01 22:24 – Updated: 2026-06-02 15:55

Title

elabftw has entry title leakage through autocompletion search

Summary

eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user performing a numeric reference/search can return results that include resources the requesting user is not authorized to view. The exposed information is limited (only the title). Attempts to access the underlying protected resource content remain blocked by authorization checks. Version 5.4.2 fixes the issue. # Affected Scope Cross-scope visibility of titles. No confirmed bypass of content-level access controls # Preconditions An authenticated user account No special privileges required beyond standard access # Impact This may enable unauthorized disclosure of sensitive information if confidential data is included in resource titles. Examples could include project names, patient identifiers, or other regulated information embedded in titles.

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/elabftw/elabftw/security/advis…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
elabftw	elabftw	Affected: < 5.4.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-28511",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-02T15:54:16.040422Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-02T15:55:36.029Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "elabftw",
          "vendor": "elabftw",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 5.4.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user performing a numeric reference/search can return results that include resources the requesting user is not authorized to view. The exposed information is limited (only the title). Attempts to access the underlying protected resource content remain blocked by authorization checks. Version 5.4.2 fixes the issue.\n\n# Affected Scope\n\nCross-scope visibility of titles.\nNo confirmed bypass of content-level access controls\n\n# Preconditions\n\nAn authenticated user account\n\nNo special privileges required beyond standard access\n\n# Impact\n\nThis may enable unauthorized disclosure of sensitive information if confidential data is included in resource titles. Examples could include project names, patient identifiers, or other regulated information embedded in titles."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-01T22:24:18.678Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/elabftw/elabftw/security/advisories/GHSA-wm4r-p2jg-2mj3",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/elabftw/elabftw/security/advisories/GHSA-wm4r-p2jg-2mj3"
        }
      ],
      "source": {
        "advisory": "GHSA-wm4r-p2jg-2mj3",
        "discovery": "UNKNOWN"
      },
      "title": "elabftw has entry title leakage through autocompletion search"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-28511",
    "datePublished": "2026-06-01T22:24:18.678Z",
    "dateReserved": "2026-02-27T20:57:47.710Z",
    "dateUpdated": "2026-06-02T15:55:36.029Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-28511",
      "date": "2026-08-10",
      "epss": "0.00186",
      "percentile": "0.0835"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-28511\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2026-06-01T23:16:22.080\",\"lastModified\":\"2026-07-22T19:10:00.120\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user performing a numeric reference/search can return results that include resources the requesting user is not authorized to view. The exposed information is limited (only the title). Attempts to access the underlying protected resource content remain blocked by authorization checks. Version 5.4.2 fixes the issue.\\n\\n# Affected Scope\\n\\nCross-scope visibility of titles.\\nNo confirmed bypass of content-level access controls\\n\\n# Preconditions\\n\\nAn authenticated user account\\n\\nNo special privileges required beyond standard access\\n\\n# Impact\\n\\nThis may enable unauthorized disclosure of sensitive information if confidential data is included in resource titles. Examples could include project names, patient identifiers, or other regulated information embedded in titles.\"},{\"lang\":\"es\",\"value\":\"eLabFTW es un cuaderno de laboratorio electr\u00f3nico de c\u00f3digo abierto. Antes de la versi\u00f3n 5.4.2, en ciertos casos, un usuario autenticado que realiza una referencia/b\u00fasqueda num\u00e9rica puede devolver resultados que incluyen recursos que el usuario solicitante no est\u00e1 autorizado a ver. La informaci\u00f3n expuesta es limitada (solo el t\u00edtulo). Los intentos de acceder al contenido subyacente del recurso protegido permanecen bloqueados por las comprobaciones de autorizaci\u00f3n. La versi\u00f3n 5.4.2 corrige el problema.\\n\\n# Alcance Afectado\\n\\nVisibilidad de t\u00edtulos entre alcances.\\nNo se ha confirmado ning\u00fan bypass de los controles de acceso a nivel de contenido\\n\\n# Precondiciones\\n\\nUna cuenta de usuario autenticado\\n\\nNo se requieren privilegios especiales m\u00e1s all\u00e1 del acceso est\u00e1ndar\\n\\n# Impacto\\n\\nEsto puede permitir la divulgaci\u00f3n no autorizada de informaci\u00f3n sensible si se incluyen datos confidenciales en los t\u00edtulos de los recursos. Los ejemplos podr\u00edan incluir nombres de proyectos, identificadores de pacientes u otra informaci\u00f3n regulada incrustada en los t\u00edtulos.\"}],\"affected\":[{\"source\":\"security-advisories@github.com\",\"affectedData\":[{\"vendor\":\"elabftw\",\"product\":\"elabftw\",\"versions\":[{\"version\":\"\u003c 5.4.2\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N\",\"baseScore\":4.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":1.4}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-06-02T15:54:16.040422Z\",\"id\":\"CVE-2026-28511\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-200\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:elabftw:elabftw:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"5.4.2\",\"matchCriteriaId\":\"593B8947-A7C6-4FA6-8D3F-E6001CB0C8E5\"}]}]}],\"references\":[{\"url\":\"https://github.com/elabftw/elabftw/security/advisories/GHSA-wm4r-p2jg-2mj3\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "redhat_vex": {
      "current_release_date": "2026-06-05T19:29:01+00:00",
      "cve": "CVE-2026-28511",
      "id": "CVE-2026-28511",
      "initial_release_date": "2026-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "elabftw has entry title leakage through autocompletion search",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28511.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-28511\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-06-02T15:54:16.040422Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-06-02T15:54:22.229Z\"}}], \"cna\": {\"title\": \"elabftw has entry title leakage through autocompletion search\", \"source\": {\"advisory\": \"GHSA-wm4r-p2jg-2mj3\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 4.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"LOW\"}}], \"affected\": [{\"vendor\": \"elabftw\", \"product\": \"elabftw\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003c 5.4.2\"}]}], \"references\": [{\"url\": \"https://github.com/elabftw/elabftw/security/advisories/GHSA-wm4r-p2jg-2mj3\", \"name\": \"https://github.com/elabftw/elabftw/security/advisories/GHSA-wm4r-p2jg-2mj3\", \"tags\": [\"x_refsource_CONFIRM\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user performing a numeric reference/search can return results that include resources the requesting user is not authorized to view. The exposed information is limited (only the title). Attempts to access the underlying protected resource content remain blocked by authorization checks. Version 5.4.2 fixes the issue.\\n\\n# Affected Scope\\n\\nCross-scope visibility of titles.\\nNo confirmed bypass of content-level access controls\\n\\n# Preconditions\\n\\nAn authenticated user account\\n\\nNo special privileges required beyond standard access\\n\\n# Impact\\n\\nThis may enable unauthorized disclosure of sensitive information if confidential data is included in resource titles. Examples could include project names, patient identifiers, or other regulated information embedded in titles.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-200\", \"description\": \"CWE-200: Exposure of Sensitive Information to an Unauthorized Actor\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2026-06-01T22:24:18.678Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-28511\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-06-02T15:55:36.029Z\", \"dateReserved\": \"2026-02-27T20:57:47.710Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2026-06-01T22:24:18.678Z\", \"assignerShortName\": \"GitHub_M\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2026-28511

Vulnerability from fkie_nvd - Published: 2026-06-01 23:16 - Updated: 2026-07-22 19:10

Severity

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Summary

References

	URL	Tags
	security-advisories@github.com	https://github.com/elabftw/elabftw/security/advisories/GHSA-wm4r-p2jg-2mj3	Vendor Advisory

Impacted products

	Vendor	Product	Version
	elabftw	elabftw	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "elabftw",
          "vendor": "elabftw",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 5.4.2"
            }
          ]
        }
      ],
      "source": "security-advisories@github.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:elabftw:elabftw:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "593B8947-A7C6-4FA6-8D3F-E6001CB0C8E5",
              "versionEndExcluding": "5.4.2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user performing a numeric reference/search can return results that include resources the requesting user is not authorized to view. The exposed information is limited (only the title). Attempts to access the underlying protected resource content remain blocked by authorization checks. Version 5.4.2 fixes the issue.\n\n# Affected Scope\n\nCross-scope visibility of titles.\nNo confirmed bypass of content-level access controls\n\n# Preconditions\n\nAn authenticated user account\n\nNo special privileges required beyond standard access\n\n# Impact\n\nThis may enable unauthorized disclosure of sensitive information if confidential data is included in resource titles. Examples could include project names, patient identifiers, or other regulated information embedded in titles."
    },
    {
      "lang": "es",
      "value": "eLabFTW es un cuaderno de laboratorio electr\u00f3nico de c\u00f3digo abierto. Antes de la versi\u00f3n 5.4.2, en ciertos casos, un usuario autenticado que realiza una referencia/b\u00fasqueda num\u00e9rica puede devolver resultados que incluyen recursos que el usuario solicitante no est\u00e1 autorizado a ver. La informaci\u00f3n expuesta es limitada (solo el t\u00edtulo). Los intentos de acceder al contenido subyacente del recurso protegido permanecen bloqueados por las comprobaciones de autorizaci\u00f3n. La versi\u00f3n 5.4.2 corrige el problema.\n\n# Alcance Afectado\n\nVisibilidad de t\u00edtulos entre alcances.\nNo se ha confirmado ning\u00fan bypass de los controles de acceso a nivel de contenido\n\n# Precondiciones\n\nUna cuenta de usuario autenticado\n\nNo se requieren privilegios especiales m\u00e1s all\u00e1 del acceso est\u00e1ndar\n\n# Impacto\n\nEsto puede permitir la divulgaci\u00f3n no autorizada de informaci\u00f3n sensible si se incluyen datos confidenciales en los t\u00edtulos de los recursos. Los ejemplos podr\u00edan incluir nombres de proyectos, identificadores de pacientes u otra informaci\u00f3n regulada incrustada en los t\u00edtulos."
    }
  ],
  "id": "CVE-2026-28511",
  "lastModified": "2026-07-22T19:10:00.120",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 1.4,
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-28511",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-06-02T15:54:16.040422Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-06-01T23:16:22.080",
  "references": [
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://github.com/elabftw/elabftw/security/advisories/GHSA-wm4r-p2jg-2mj3"
    }
  ],
  "sourceIdentifier": "security-advisories@github.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ],
      "source": "security-advisories@github.com",
      "type": "Secondary"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

CVE-2026-28511 (GCVE-0-2026-28511)

FKIE_CVE-2026-28511

Tags

Sightings

Nomenclature