3 matches found
CVE-2026-82544
A cross-site request forgery (CSRF) vulnerability exists in wger-project wger up to version 2.6.0-alpha2 , specifically in the reset_user_password function within the Password Reset component (wger/gym/views/gym.py). A remote attacker can exploit this by manipulating a victim into performing an u...
5.3CVSS5.4AI score
SaveExploits0References8
CVE-2022-2650 Improper Restriction of Excessive Authentication Attempts in wger-project/wger
Improper Restriction of Excessive Authentication Attempts in GitHub repository wger-project/wger prior to 2.2...
7.8CVSS7.9AI score
SaveExploits0References4
CVE-2022-2650 Improper Restriction of Excessive Authentication Attempts in wger-project/wger
Improper Restriction of Excessive Authentication Attempts in GitHub repository wger-project/wger prior to 2.2...
7.8CVSS9.8AI score0.00667EPSS
SaveExploits1References2
20