Mgrraf

**Name of the Vulnerable Software and Affected Versions** eLabFTW versions prior to 4.0.0 **Description** This issue affects an open source electronic lab notebook for research labs, allowing an attacker to make GET requests on behalf of the server. The attack is "blind" because the attacker cannot see the result of the request. **Recommendations** For versions prior to 4.0.0, update to version 4.0.0 to resolve the issue.