3 matches found
CVE-2023-4455
Cross-Site Request Forgery (CSRF) in wallabag/wallabag prior to 2.6.3. Public sources describe an attacker‑facing flaw in the delete API flow (DeveloperController.php) where CSRF validation is insufficient, enabling arbitrary API key deletion via a crafted GET to /developer/client/delete/{id}. CV...
6.5CVSS6.7AI score0.00321EPSS
SaveExploits1References2Affected Software1
20