Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

GHSA-5PM7-CP8F-P2C2 wallabag/wallabag Has Multiple Cross-Site Request Forgery (CSRF) Vulnerabilities

🗓️ 09 Apr 2025 13:09:26Reported by GoogleType 
osv
 osv🔗 osv.dev👁 3 Views

wallabag versions before 2.6.11 have CSRF vulnerabilities allowing unauthorized actions by attackers.

Refs
SourceLink
githubwww.github.com/wallabag/wallabag/security/advisories/GHSA-5pm7-cp8f-p2c2
githubwww.github.com/wallabag/wallabag/commit/edffef837598355c9bec433c469f1e04c35b27cb
githubwww.github.com/wallabag/wallabag/commit/ed1acf59e166a2a6bb81c52baaeabd6196feae98
githubwww.github.com/wallabag/wallabag/commit/eb8408b22fbaa6b3d78047d6203b23b7f52bbf03
githubwww.github.com/wallabag/wallabag/commit/e162408139ac9bb12e69f4d49de45ade49369c21
githubwww.github.com/wallabag/wallabag/commit/ddf2e808422e41ea55cebf2aa12eb1823c5c340a
githubwww.github.com/wallabag/wallabag/commit/d703fa6a3a75f7c3b433e8caf618bfb0a9a0ba63
githubwww.github.com/wallabag/wallabag/commit/d1e128900acc0cb8c88eb7a085c9ef5420cf0c43
githubwww.github.com/wallabag/wallabag/commit/cf49be694089667bbab9f10d52862fbdba9a89de
githubwww.github.com/wallabag/wallabag/commit/ac5b5fb379233d6e96ea14ae21b7f88761d5fa3f
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
09 Apr 2025 13:27Current
7.9High risk
Vulners AI Score7.9
CVSS 3.14.3
csrf vulnerabilitieswallabag versionunauthorized actionssecurity updateapi token management
3