| Package | Affected versions | Patched versions |
|---|---|---|
| wger | ≤ 2.2.0a3all versions | |
| workout manager | = 2.2.0 |
Cross Site Request Forgery (CSRF) vulnerability in wger Project wger Workout Manager 2.2.0a3 allows a remote attacker to gain privileges via the user-management feature in the gym/views/gym.py, templates/gym/reset_user_password.html, templates/user/overview.html, core/views/user.py, and templates/user/preferences.html, core/forms.py components.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free