CVE-2026-28511

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-28511", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-02-27T20:57:47.710Z", "datePublished": "2026-06-01T22:24:18.678Z", "dateUpdated": "2026-06-02T15:55:36.029Z"}, "containers": {"cna": {"title": "elabftw has entry title leakage through autocompletion search", "problemTypes": [{"descriptions": [{"cweId": "CWE-200", "lang": "en", "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/elabftw/elabftw/security/advisories/GHSA-wm4r-p2jg-2mj3", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/elabftw/elabftw/security/advisories/GHSA-wm4r-p2jg-2mj3"}], "affected": [{"vendor": "elabftw", "product": "elabftw", "versions": [{"version": "< 5.4.2", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-06-01T22:24:18.678Z"}, "descriptions": [{"lang": "en", "value": "eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user performing a numeric reference/search can return results that include resources the requesting user is not authorized to view. The exposed information is limited (only the title). Attempts to access the underlying protected resource content remain blocked by authorization checks. Version 5.4.2 fixes the issue.\n\n# Affected Scope\n\nCross-scope visibility of titles.\nNo confirmed bypass of content-level access controls\n\n# Preconditions\n\nAn authenticated user account\n\nNo special privileges required beyond standard access\n\n# Impact\n\nThis may enable unauthorized disclosure of sensitive information if confidential data is included in resource titles. Examples could include project names, patient identifiers, or other regulated information embedded in titles."}], "source": {"advisory": "GHSA-wm4r-p2jg-2mj3", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-02T15:54:16.040422Z", "id": "CVE-2026-28511", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-02T15:55:36.029Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-28511", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-02T15:54:16.040422Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-02T15:54:22.229Z"}}], "cna": {"title": "elabftw has entry title leakage through autocompletion search", "source": {"advisory": "GHSA-wm4r-p2jg-2mj3", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "elabftw", "product": "elabftw", "versions": [{"status": "affected", "version": "< 5.4.2"}]}], "references": [{"url": "https://github.com/elabftw/elabftw/security/advisories/GHSA-wm4r-p2jg-2mj3", "name": "https://github.com/elabftw/elabftw/security/advisories/GHSA-wm4r-p2jg-2mj3", "tags": ["x_refsource_CONFIRM"]}], "descriptions": [{"lang": "en", "value": "eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user performing a numeric reference/search can return results that include resources the requesting user is not authorized to view. The exposed information is limited (only the title). Attempts to access the underlying protected resource content remain blocked by authorization checks. Version 5.4.2 fixes the issue.\n\n# Affected Scope\n\nCross-scope visibility of titles.\nNo confirmed bypass of content-level access controls\n\n# Preconditions\n\nAn authenticated user account\n\nNo special privileges required beyond standard access\n\n# Impact\n\nThis may enable unauthorized disclosure of sensitive information if confidential data is included in resource titles. Examples could include project names, patient identifiers, or other regulated information embedded in titles."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-06-01T22:24:18.678Z"}}}, "cveMetadata": {"cveId": "CVE-2026-28511", "state": "PUBLISHED", "dateUpdated": "2026-06-02T15:55:36.029Z", "dateReserved": "2026-02-27T20:57:47.710Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-06-01T22:24:18.678Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "elabftw", "vendor": "elabftw", "versions": [{"status": "affected", "version": "< 5.4.2"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:elabftw:elabftw:*:*:*:*:*:*:*:*", "matchCriteriaId": "593B8947-A7C6-4FA6-8D3F-E6001CB0C8E5", "versionEndExcluding": "5.4.2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user performing a numeric reference/search can return results that include resources the requesting user is not authorized to view. The exposed information is limited (only the title). Attempts to access the underlying protected resource content remain blocked by authorization checks. Version 5.4.2 fixes the issue.\n\n# Affected Scope\n\nCross-scope visibility of titles.\nNo confirmed bypass of content-level access controls\n\n# Preconditions\n\nAn authenticated user account\n\nNo special privileges required beyond standard access\n\n# Impact\n\nThis may enable unauthorized disclosure of sensitive information if confidential data is included in resource titles. Examples could include project names, patient identifiers, or other regulated information embedded in titles."}, {"lang": "es", "value": "eLabFTW es un cuaderno de laboratorio electr\u00f3nico de c\u00f3digo abierto. Antes de la versi\u00f3n 5.4.2, en ciertos casos, un usuario autenticado que realiza una referencia/b\u00fasqueda num\u00e9rica puede devolver resultados que incluyen recursos que el usuario solicitante no est\u00e1 autorizado a ver. La informaci\u00f3n expuesta es limitada (solo el t\u00edtulo). Los intentos de acceder al contenido subyacente del recurso protegido permanecen bloqueados por las comprobaciones de autorizaci\u00f3n. La versi\u00f3n 5.4.2 corrige el problema.\n\n# Alcance Afectado\n\nVisibilidad de t\u00edtulos entre alcances.\nNo se ha confirmado ning\u00fan bypass de los controles de acceso a nivel de contenido\n\n# Precondiciones\n\nUna cuenta de usuario autenticado\n\nNo se requieren privilegios especiales m\u00e1s all\u00e1 del acceso est\u00e1ndar\n\n# Impacto\n\nEsto puede permitir la divulgaci\u00f3n no autorizada de informaci\u00f3n sensible si se incluyen datos confidenciales en los t\u00edtulos de los recursos. Los ejemplos podr\u00edan incluir nombres de proyectos, identificadores de pacientes u otra informaci\u00f3n regulada incrustada en los t\u00edtulos."}], "id": "CVE-2026-28511", "lastModified": "2026-07-22T19:10:00.120", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-28511", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-06-02T15:54:16.040422Z", "version": "2.0.3"}}]}, "published": "2026-06-01T23:16:22.080", "references": [{"source": "security-advisories@github.com", "tags": ["Vendor Advisory"], "url": "https://github.com/elabftw/elabftw/security/advisories/GHSA-wm4r-p2jg-2mj3"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,5.4.2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "elabftw", "source": "cna", "vendor": "elabftw"}, "product": "elabftw", "vendor": "elabftw"}], "created": "2026-06-01T23:45:40.324961+00:00", "updated": "2026-06-02T01:00:11.775769+00:00", "vendors": ["elabftw", "elabftw$PRODUCT$elabftw"]}