PT-2021-23964

Name of the Vulnerable Software and Affected Versions: eLabFTW versions prior to 4.2.0 Description: The issue allows any authenticated user to gain access to arbitrary accounts by setting a specially crafted email address, impacting instances without an explicit email domain name allowlist...