GHSA-QWX8-MXXX-MG96 wallabag contains Improper Authorization via export feature

Description The export feature lets a user export a single entry or a set of entries in a given format e.g. PDF, MOBI, TXT. For example, https://yourinstance.wallabag.org/export/45.pdf will export the entry with id 45 in PDF format. Since wallabag 2.0.0-alpha.1, this feature is vulnerable to an...

Improper Authorization

wallabag/wallabag is vulnerable to Improper Authorization. A remote attacker is able to gain access to unauthorized annotations from other users due to insecure direct object references which is made possible because of improper validation of the user permissions...

Improper Authorization

wallabag/wallabag is vulnerable to Improper Authorization. A remote attacker is able to gain access to unauthorized projects from other users due to insecure direct object references which is made possible because of improper validation of the user permissions...

GHSA-H45F-RJVW-2RV2 Withdrawn: wallabag subject to Improper Authorization

Duplicate advisory This advisory has been withdrawn because it is a duplicate of GHSA-qwx8-mxxx-mg96. This link is maintained to preserve external references. Original Description Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3...

Withdrawn: wallabag subject to Improper Authorization via annotations

Duplicate advisory This advisory has been withdrawn because it is a duplicate of GHSA-mrqx-mjc4-vfh3. This link is maintained to preserve external references. Original Description Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3...

GHSA-XRW3-WQPH-3FXG Withdrawn: wallabag subject to Improper Authorization via annotations

Duplicate advisory This advisory has been withdrawn because it is a duplicate of GHSA-mrqx-mjc4-vfh3. This link is maintained to preserve external references. Original Description Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3...

CVE-2023-0609

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3...

CVE-2023-0610

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3...

Authorization

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3...

CVE-2023-0609 Improper Authorization in wallabag/wallabag

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3...

wallabag 授权问题漏洞

wallabag is a web application that allows you to save web pages for later reading. wallabag versions prior to 2.5.3 contain an authorization issue vulnerability that could be exploited by attackers to update other users' comments...

PT-2023-16400 · Wallabag · Wallabag

Name of the Vulnerable Software and Affected Versions: wallabag versions prior to 2.5.3 Description: The issue concerns improper authorization in the wallabag GitHub repository. Specifically, the annotations feature allows users to add annotations on highlighted parts of an entry. However, the...

CVE-2023-0610 Improper Authorization in wallabag/wallabag

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3...

CVE-2023-0610

wallabag/wallabag (pre-2.5.3) is affected by an improper authorization vulnerability in the annotations feature. The issue arises from missing authorization validation on PUT/DELETE requests for annotations, allowing a logged-in user to modify or delete any annotation by ID and potentially disclo...

CVE-2023-0609 Improper Authorization in wallabag/wallabag

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3...

CVE-2023-0610 Improper Authorization in wallabag/wallabag

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3...

CVE-2023-0609

wallabag prior to 2.5.3 contains an Improper Authorization vulnerability via the export feature that allows insecure direct object reference (IDOR) to view other users’ entries. Root cause: missing ownership validation in the export/download path (exportEntry). Impact: potential exposure of user ...

wallabag 授权问题漏洞

wallabag is a web application that allows you to save web pages for later reading. wallabag versions prior to 2.5.3 contain an authorization issue vulnerability that stems from the fact that the exporting entry module is vulnerable to an IDOR attack, which could be exploited to view other users'...

CVE-2023-0609 Improper Authorization in wallabag/wallabag

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3...

PT-2023-16399 · Wallabag · Wallabag

Name of the Vulnerable Software and Affected Versions: wallabag versions prior to 2.5.3 Description: The issue concerns an improper authorization vulnerability in the wallabag GitHub repository. It affects the export feature, which allows users to export entries in various formats, such as PDF,...