Wallabag Improper Authorization vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-0734 · ADVISORY
• wallabag/wallabag commit acd285d · WEB
• wallabag/wallabag · WEB
• wallabag/wallabag release 2.5.4 · WEB
• huntr.dev/bounties/a296324c-6925-4f5f-a729-39b0d73d5b8b · WEB

Mais vulnerabilidades de wallabag/wallabag

• GHSA-5pm7-cp8f-p2c2MÉDIO 4.3wallabag/wallabag Has Multiple Cross-Site Request Forgery (CSRF) Vulnerabilities
• CVE-2023-0737MÉDIO 6.5wallabag version 2.5.2 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows attackers to arbitrarily delete user accounts …
• GHSA-56fm-hfp3-x3w3MÉDIO 4.3Wallabag user can disable 2FA unintentionally
• CVE-2023-4455MÉDIO 6.5Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3.
• CVE-2023-4454MÉDIO 5.7Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3.