Wallabag Improper Authorization vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-0734 · ADVISORY
• wallabag/wallabag commit acd285d · WEB
• wallabag/wallabag · WEB
• wallabag/wallabag release 2.5.4 · WEB
• huntr.dev/bounties/a296324c-6925-4f5f-a729-39b0d73d5b8b · WEB

wallabag/wallabag のその他の脆弱性

• GHSA-5pm7-cp8f-p2c2中 4.3wallabag/wallabag Has Multiple Cross-Site Request Forgery (CSRF) Vulnerabilities
• CVE-2023-0737中 6.5wallabag version 2.5.2 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows attackers to arbitrarily delete user accounts …
• GHSA-56fm-hfp3-x3w3中 4.3Wallabag user can disable 2FA unintentionally
• CVE-2023-4455中 6.5Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3.
• CVE-2023-4454中 5.7Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3.