3 matches found
CVE-2023-4454 Cross-Site Request Forgery (CSRF) in wallabag/wallabag
Cross-Site Request Forgery CSRF in GitHub repository wallabag/wallabag prior to 2.6.3...
4.3CVSS5.9AI score0.00234EPSS
SaveExploits1References2
CVE-2023-4454
The CVE-2023-4454 entry concerns wallabag/wallabag prior to version 2.6.3. The vulnerability is a Cross-Site Request Forgery (CSRF) in the ConfigController.php reset actions, caused by missing CSRF protection. This could allow an attacker to trigger GET requests to /reset/annotations, /reset/entr...
5.7CVSS5AI score0.00234EPSS
SaveExploits1References2Affected Software1
20