ID:8904 - Exploit for Permissions, Privileges, and Access Controls in eLabFTW - CVE-2022-31007

Link to public exploit:

Vulnerability description

The vulnerability allows a remote user to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions. A remote administrator can assign itself system administrator privileges within the application, or create a new system administrator account. 

Remediation