CSRF leading to delete account in wallabag/wallabag

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2023-0737 · ADVISORY
• wallabag/wallabag commit 268372d · WEB
• wallabag/wallabag · PACKAGE
• huntr.com/bounties/4ba20fe7-4061-4dfb-ab2f-ecaf110641a5 · WEB

Lỗ hổng khác của wallabag/wallabag

• GHSA-5pm7-cp8f-p2c2TRUNG BÌNH 4.3wallabag/wallabag Has Multiple Cross-Site Request Forgery (CSRF) Vulnerabilities
• GHSA-56fm-hfp3-x3w3TRUNG BÌNH 4.3Wallabag user can disable 2FA unintentionally
• CVE-2023-4455TRUNG BÌNH 6.5Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3.
• CVE-2023-4454TRUNG BÌNH 5.7Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3.
• CVE-2023-3566TRUNG BÌNH 6.5A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality…