PT-2023-29270

Name of the Vulnerable Software and Affected Versions wallabag versions prior to 2.6.3 Description The issue is related to Cross-Site Request Forgery CSRF in the wallabag GitHub repository. This allows attackers to arbitrarily delete API keys via the /developer/client/delete/id endpoint...