3 matches found
CVE-2023-4454
The CVE-2023-4454 entry concerns wallabag/wallabag prior to version 2.6.3. The vulnerability is a Cross-Site Request Forgery (CSRF) in the ConfigController.php reset actions, caused by missing CSRF protection. This could allow an attacker to trigger GET requests to /reset/annotations, /reset/entr...
5.7CVSS5.6AI score0.00268EPSS
SaveExploits1References2Affected Software1
20