3 matches found
CVE-2023-0609 Improper Authorization in wallabag/wallabag
Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3...
6.5CVSS7.1AI score0.00637EPSS
SaveExploits1References2
CVE-2023-0609 Improper Authorization in wallabag/wallabag
Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3...
6.5CVSS5.7AI score
SaveExploits0References4
CVE-2023-0609
wallabag prior to 2.5.3 contains an Improper Authorization vulnerability via the export feature that allows insecure direct object reference (IDOR) to view other users’ entries. Root cause: missing ownership validation in the export/download path (exportEntry). Impact: potential exposure of user ...
6.5CVSS4.7AI score0.00637EPSS
SaveExploits1References2Affected Software1
20