wger vulnerable to brute force attempts

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-2650 · ADVISORY
• wger-project/wger commit 5e3167e · WEB
• wger-project/wger · PACKAGE
• huntr.dev/bounties/f0d85efa-4e78-4b1d-848f-edea115af64b · WEB
• pypi.org/project/wger · PACKAGE
• GitHub Advisory GHSA-gr58-76rp-mmg4 · ADVISORY

wger のその他の脆弱性

• CVE-2026-46438中 6.5wger is a free, open-source workout and fitness manager. Prior to version 2.6, an authenticated attacker can inject arbitrary workout log en…
• CVE-2026-46437中 4.8wger is a free, open-source workout and fitness manager. Versions prior to 2.6 have a vulnerability in the authentication/session lifecycle …
• CVE-2026-46434高 7.1wger is a free, open-source workout and fitness manager. Prior to version 2.6, a user with only the `gym_trainer` permission can deactivate …
• CVE-2026-45161中 5.4wger is a free, open-source workout and fitness manager. Prior to version 2.6, the `trainer_login` view in wger accepts GET requests and exe…
• CVE-2026-43976高 7.1wger is a free, open-source workout and fitness manager. Prior to version 2.6, five gym management views in wger apply a flawed gym-scope gu…