Cross-Site Request Forgery (CSRF) in wallabag/wallabag

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-0735 · ADVISORY
• wallabag/wallabag commit 268372d · WEB
• wallabag/wallabag · PACKAGE
• huntr.dev/bounties/8bc78cb1-b10b-4152-842e-ceb999fc5508 · WEB

wallabag/wallabag의 다른 취약점

• GHSA-5pm7-cp8f-p2c2보통 4.3wallabag/wallabag Has Multiple Cross-Site Request Forgery (CSRF) Vulnerabilities
• CVE-2023-0737보통 6.5wallabag version 2.5.2 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows attackers to arbitrarily delete user accounts …
• GHSA-56fm-hfp3-x3w3보통 4.3Wallabag user can disable 2FA unintentionally
• CVE-2023-4455보통 6.5Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3.
• CVE-2023-4454보통 5.7Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3.