9 matches found
CVE-2025-60535
A Cross-Site Request Forgery CSRF in the component /endpoints/currency/currency of Wallos v4.1.1 allows attackers to execute arbitrary operations via a crafted GET request...
EUVD-2025-34263
A Cross-Site Request Forgery CSRF in the component /endpoints/currency/currency of Wallos v4.1.1 allows attackers to execute arbitrary operations via a crafted GET request...
CVE-2025-60535
A Cross-Site Request Forgery CSRF in the component /endpoints/currency/currency of Wallos v4.1.1 allows attackers to execute arbitrary operations via a crafted GET request...
CVE-2025-60535
A Cross-Site Request Forgery CSRF in the component /endpoints/currency/currency of Wallos v4.1.1 allows attackers to execute arbitrary operations via a crafted GET request...
CVE-2025-60535
A Cross-Site Request Forgery (CSRF) vulnerability exists in Wallos v4.1.1 , specifically within the /endpoints/currency/currency component. This flaw allows an attacker to execute arbitrary operations by sending a crafted GET request . While the vulnerability is confirmed across multiple sources,...
Wallos security vulnerabilities
Wallos is an open source personal subscription tracker by the individual developer Miguel Ribeiro. A security vulnerability exists in Wallos version 4.1.1, which stems from an unvalidated cross-site request in component/endpoints/currency/currency that could lead to the execution of arbitrary...
PT-2025-42158
Name of the Vulnerable Software and Affected Versions Wallos version 4.1.1 Description A Cross-Site Request Forgery CSRF exists in the /endpoints/currency/currency component. This allows attackers to execute arbitrary operations by sending a specially crafted GET request. Recommendations Update t...
