wger vulnerable to brute force attempts

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-2650 · ADVISORY
• wger-project/wger commit 5e3167e · WEB
• wger-project/wger · PACKAGE
• huntr.dev/bounties/f0d85efa-4e78-4b1d-848f-edea115af64b · WEB
• pypi.org/project/wger · PACKAGE
• GitHub Advisory GHSA-gr58-76rp-mmg4 · ADVISORY

wger의 다른 취약점

• CVE-2026-46438보통 6.5wger is a free, open-source workout and fitness manager. Prior to version 2.6, an authenticated attacker can inject arbitrary workout log en…
• CVE-2026-46437보통 4.8wger is a free, open-source workout and fitness manager. Versions prior to 2.6 have a vulnerability in the authentication/session lifecycle …
• CVE-2026-46434높음 7.1wger is a free, open-source workout and fitness manager. Prior to version 2.6, a user with only the `gym_trainer` permission can deactivate …
• CVE-2026-45161보통 5.4wger is a free, open-source workout and fitness manager. Prior to version 2.6, the `trainer_login` view in wger accepts GET requests and exe…
• CVE-2026-43976높음 7.1wger is a free, open-source workout and fitness manager. Prior to version 2.6, five gym management views in wger apply a flawed gym-scope gu…