GHSA-6QQ7-3HQC-P5W4 Wallabag vulnerable to Allocation of Resources Without Limits or Throttling

A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /config of the component Profile Config. The manipulation of the argument Name leads to allocation of resources. The exploit has been disclosed ...

Wallabag vulnerable to Allocation of Resources Without Limits or Throttling

A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /config of the component Profile Config. The manipulation of the argument Name leads to allocation of resources. The exploit has been disclosed ...

CVE-2023-3566

A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /config of the component Profile Config. The manipulation of the argument Name leads to allocation of resources. The exploit has been disclosed ...

Design/Logic Flaw

A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /config of the component Profile Config. The manipulation of the argument Name leads to allocation of resources. The exploit has been disclosed ...

wallabag 安全漏洞

wallabag is a web application that allows you to save web pages for later reading. A security vulnerability exists in wallabag version 2.5.4, which stems from the parameter Name in the file /config that causes resource allocation...

CVE-2023-3566 wallabag Profile Config config allocation of resources

A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /config of the component Profile Config. The manipulation of the argument Name leads to allocation of resources. The exploit has been disclosed ...

CVE-2023-3566 wallabag Profile Config config allocation of resources

A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /config of the component Profile Config. The manipulation of the argument Name leads to allocation of resources. The exploit has been disclosed ...

CVE-2023-3566

CVE-2023-3566 affects wallabag 2.5.4. The vulnerability targets an unknown functionality in the file /config of the Profile Config component, where manipulating the Name argument leads to allocation (resource exhaustion). The exploit has been disclosed publicly and may be used. Multiple connected...

PT-2023-25247 · Wallabag · Wallabag

Name of the Vulnerable Software and Affected Versions: wallabag version 2.5.4 Description: A vulnerability was found in the file /config of the component Profile Config, affecting an unknown functionality. The manipulation of the Name argument leads to allocation of resources. The exploit has bee...

CSRF leading to delete Client API in API clients management

Description wallabag was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily delete API key via client/delete/id Proof of Concept history.pushState'', '', '/'; document.forms0.submit;...

wallabag 安全漏洞

wallabag is a web application that allows you to save web pages for later reading. A cross-site request forgery vulnerability exists in wallabag version 2.5.2. An attacker can exploit this vulnerability to arbitrarily delete user accounts via the /account/delete endpoint...

Several CSRFs in Reset Area and Delete Entry Action

Description I find wallabag suffering several Cross-Site Request Forgery CSRF which allows attackers to arbitrarily delete the victim user's annotations, entries and tags by the GET request to /reset/annotations, /reset/entries, /reset/tags, /reset/archived, as well as /delete/Entry ID, in which...

Wallabag Improper Authorization vulnerability

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.4...

GHSA-8CCW-F83G-V7G3 Wallabag Improper Authorization vulnerability

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.4...

CVE-2023-0734

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.4...

Authorization

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.4...

CVE-2023-0734 Improper Authorization in wallabag/wallabag

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.4...

PT-2023-16488 · Wallabag · Wallabag

Name of the Vulnerable Software and Affected Versions: wallabag versions prior to 2.5.4 Description: The issue is related to improper authorization in the wallabag GitHub repository. Recommendations: For versions prior to 2.5.4, update to version 2.5.4 or later to resolve the issue...

wallabag 授权问题漏洞

wallabag is a web application that allows you to save web pages for later reading. An authorization issue vulnerability exists in versions prior to wallabag 2.5.4 that stems from improper authorization management...

CVE-2023-0734

CVE-2023-0734 affects wallabag/wallabag prior to 2.5.4 due to an improper authorization issue in the GitHub repository. The vulnerability stems from inadequate access control in the affected code paths, enabling unauthorized behavior. Public sources consistently identify the affected version rang...