Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-07921
HistoryFeb 09, 2023 - 12:00 a.m.

wallabag authorization issue vulnerability

2023-02-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
wallabag
web application
vulnerability
authorization
idor attack
entry module

0.001 Low

EPSS

Percentile

23.5%

wallabag is a web application that allows you to save web pages for later reading. wallabag versions prior to 2.5.3 contain an authorization issue vulnerability that stems from the fact that the exporting entry module is vulnerable to an IDOR attack, which could be exploited to view other users’ entries.

CPENameOperatorVersion
wallabag wallabaglt2.5.3

0.001 Low

EPSS

Percentile

23.5%