Wallabag Security Vulnerabilities

CVE-2023-4455

Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to...

CVE-2023-4454

Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to...

CVE-2023-3566

A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /config of the component Profile Config. The manipulation of the argument Name leads to allocation of resources. The exploit has been disclosed...

CVE-2023-0734

Improper Authorization in GitHub repository wallabag/wallabag prior to...

CVE-2023-0735

Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to...

CVE-2023-0736

Cross-site Scripting (XSS) - Stored in GitHub repository wallabag/wallabag prior to...

CVE-2023-0610

Improper Authorization in GitHub repository wallabag/wallabag prior to...

CVE-2023-0609

Improper Authorization in GitHub repository wallabag/wallabag prior to...

CVE-2018-11352

The Wallabag application 2.2.3 to 2.3.2 is affected by one cross-site scripting (XSS) vulnerability that is stored within the configuration page. This vulnerability enables the execution of a JavaScript payload each time an administrator visits the configuration page. The vulnerability can be...