Product · wallabag

wallabag/wallabag

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

Medium 6.5

CVE-2023-0737

CSRF in wallabag/wallabag

wallabag version 2.5.2 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows attackers to arbitrarily delete user accounts via the /account/delete endpoint. This issue is fixed in version 2.5.4.

wallabag wallabag/wallabag wallabag/wallabag Packagist

Nov 15, 2024
Medium 6.5

CVE-2023-4455

Cross-Site Request Forgery (CSRF) in wallabag/wallabag

Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3.

wallabag wallabag/wallabag wallabag/wallabag Packagist

Aug 21, 2023
Medium 4.3

CVE-2023-4454

Cross-Site Request Forgery (CSRF) in wallabag/wallabag

Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3.

wallabag wallabag/wallabag wallabag/wallabag Packagist

Aug 21, 2023
Medium 6.5

CVE-2023-0735

Cross-Site Request Forgery (CSRF) in wallabag/wallabag

Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.5.4.

wallabag wallabag/wallabag wallabag/wallabag Packagist

Feb 7, 2023
Medium 4.6

CVE-2023-0736

Cross-site Scripting (XSS) - Stored in wallabag/wallabag

Cross-site Scripting (XSS) - Stored in GitHub repository wallabag/wallabag prior to 2.5.4.

wallabag wallabag/wallabag wallabag/wallabag Packagist

Feb 7, 2023
Medium 6.5

CVE-2023-0609

Improper Authorization in wallabag/wallabag

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3.

wallabag wallabag/wallabag wallabag/wallabag Packagist

Feb 1, 2023
Medium 5.4

CVE-2023-0610

Improper Authorization in wallabag/wallabag

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3.

wallabag wallabag/wallabag wallabag/wallabag Packagist

Feb 1, 2023