140 matches found
wallabag 安全漏洞
wallabag is a web application that allows you to save web pages for later reading. A cross-site request forgery vulnerability exists in wallabag version 2.5.2. An attacker can exploit this vulnerability to arbitrarily delete user accounts via the /account/delete endpoint...
Several CSRFs in Reset Area and Delete Entry Action
Description I find wallabag suffering several Cross-Site Request Forgery CSRF which allows attackers to arbitrarily delete the victim user's annotations, entries and tags by the GET request to /reset/annotations, /reset/entries, /reset/tags, /reset/archived, as well as /delete/Entry ID, in which...
Wallabag Improper Authorization vulnerability
Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.4...
GHSA-8CCW-F83G-V7G3 Wallabag Improper Authorization vulnerability
Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.4...
CVE-2023-0734
Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.4...
Authorization
Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.4...
PT-2023-16488 · Wallabag · Wallabag
Name of the Vulnerable Software and Affected Versions: wallabag versions prior to 2.5.4 Description: The issue is related to improper authorization in the wallabag GitHub repository. Recommendations: For versions prior to 2.5.4, update to version 2.5.4 or later to resolve the issue...
CVE-2023-0734
CVE-2023-0734 affects wallabag/wallabag prior to 2.5.4 due to an improper authorization issue in the GitHub repository. The vulnerability stems from inadequate access control in the affected code paths, enabling unauthorized behavior. Public sources consistently identify the affected version rang...
wallabag 授权问题漏洞
wallabag is a web application that allows you to save web pages for later reading. An authorization issue vulnerability exists in versions prior to wallabag 2.5.4 that stems from improper authorization management...
CVE-2023-0734 Improper Authorization in wallabag/wallabag
Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.4...
CVE-2023-0734 Improper Authorization in wallabag/wallabag
Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.4...
Stored Cross-site Scripting (XSS)
wallabag/wallabag is vulnerable to Stored Cross-site Scripting XSS. The vulnerability exists in share.html.twig due to lack of validations on HTML elements, which allows an attacker to inject and execute malicious JavaScript though the name field...
Cross-Site Request Forgery (CSRF)
wallabag/wallabag is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability exists due to a lack of validations in the account/delete functionality, which allows an attacker to delete a victims account after convincing a user to click a link...
wallabag licensing issue vulnerability (CNVD-2023-07920)
wallabag is a web application that allows you to save web pages for later reading. wallabag versions prior to 2.5.3 contain an authorization issue vulnerability that could be exploited by attackers to update other users' comments...
wallabag authorization issue vulnerability
wallabag is a web application that allows you to save web pages for later reading. wallabag versions prior to 2.5.3 contain an authorization issue vulnerability that stems from the fact that the exporting entry module is vulnerable to an IDOR attack, which could be exploited to view other users'...
GHSA-2QXP-XMX6-CQ4F Cross-Site Request Forgery (CSRF) in wallabag/wallabag
Cross-Site Request Forgery CSRF in GitHub repository wallabag/wallabag prior to 2.5.4...
GHSA-3X2C-87CQ-QX49 Cross-site Scripting (XSS) in wallabag/wallabag
Cross-site Scripting XSS - Stored in GitHub repository wallabag/wallabag prior to 2.5.4...
CVE-2023-0736
Cross-site Scripting XSS - Stored in GitHub repository wallabag/wallabag prior to 2.5.4...