CSRF leading to delete account in wallabag/wallabag

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-0737 · ADVISORY
• wallabag/wallabag commit 268372d · WEB
• wallabag/wallabag · PACKAGE
• huntr.com/bounties/4ba20fe7-4061-4dfb-ab2f-ecaf110641a5 · WEB

wallabag/wallabag のその他の脆弱性

• GHSA-5pm7-cp8f-p2c2中 4.3wallabag/wallabag Has Multiple Cross-Site Request Forgery (CSRF) Vulnerabilities
• GHSA-56fm-hfp3-x3w3中 4.3Wallabag user can disable 2FA unintentionally
• CVE-2023-4455中 6.5Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3.
• CVE-2023-4454中 5.7Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3.
• CVE-2023-3566中 6.5A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality…