PT-2023-26585 · Unknown · Wger Workout Manager

Name of the Vulnerable Software and Affected Versions: wger Workout Manager version 2.2.0a3 Description: A Cross Site Scripting issue allows a remote attacker to gain privileges via the license author field in the add-ingredient function in the templates/ingredients/view.html,...

wger Cross-Site Scripting Vulnerability

wger is a self-hosted FLOSS fitness/exercise, nutrition and weight tracker written in Django. A security vulnerability exists in wger Workout Manager version v.2.2.0a3, which stems from a cross-site scripting vulnerability that allows remote attackers to gain privileges...

CVE-2023-38759

CVE-2023-38759 describes a Cross-Site Request Forgery (CSRF) vulnerability in the wger Project, Workout Manager version 2.2.0a3. The issue enables a remote attacker to gain privileges via the user-management features, affecting multiple components/files (e.g., gym.py, reset_user_password.html, ov...

CVE-2023-38758

Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows a remote attacker to gain privileges via the licenseauthor field in the add-ingredient function in the templates/ingredients/view.html, models/ingredients.py, and views/ingredients.py components...

Authentication Bypass

wger is vulnerable to authentication bypass. The vulnerability exists due to improper restrictions of unsuccessful password attempts which allows an attacker to use brute force attacks on the login page...

GHSA-GR58-76RP-MMG4 wger vulnerable to brute force attempts

Improper Restriction of Excessive Authentication Attempts in GitHub repository wger-project/wger prior to 2.2...

wger vulnerable to brute force attempts

Improper Restriction of Excessive Authentication Attempts in GitHub repository wger-project/wger prior to 2.2...

CVE-2022-2650

Improper Restriction of Excessive Authentication Attempts in GitHub repository wger-project/wger prior to 2.2...

Input validation

Improper Restriction of Excessive Authentication Attempts in GitHub repository wger-project/wger prior to 2.2...

CVE-2022-2650 Improper Restriction of Excessive Authentication Attempts in wger-project/wger

Improper Restriction of Excessive Authentication Attempts in GitHub repository wger-project/wger prior to 2.2...

CVE-2022-2650 Improper Restriction of Excessive Authentication Attempts in wger-project/wger

Improper Restriction of Excessive Authentication Attempts in GitHub repository wger-project/wger prior to 2.2...

PT-2022-17904

Name of the Vulnerable Software and Affected Versions wger versions prior to 2.2 Description The issue is related to improper restriction of excessive authentication attempts in the GitHub repository wger-project/wger. Recommendations For versions prior to 2.2, update to version 2.2 or later to...

CVE-2022-2650

CVE-2022-2650 affects wger-project/wger prior to version 2.2, due to improper restriction of excessive authentication attempts. This vulnerability is documented with CVSS scores: NVD v3.1 base 9.8 (CRITICAL) and CNA v3.0 base 7.8 (HIGH). Remediation per sources is to update to version 2.2 or later.

CVE-2022-2650 Improper Restriction of Excessive Authentication Attempts in wger-project/wger

Improper Restriction of Excessive Authentication Attempts in GitHub repository wger-project/wger prior to 2.2...

wger 安全漏洞

wger is a self-hosted FLOSS fitness/exercise, nutrition and weight tracker written in Django. A security vulnerability exists in versions prior to wger 2.2 that stems from an improper limit on the number of attempts for authentication...

Denial Of Service (DoS)

wger is vulnerable to denial-of-service DoS attacks. The vulnerability exists as there are no limit checks in the csv upload functionality and it is exploitable by importing large size csv...