Cross-Site Request Forgery (CSRF)

2023-02-1305:55:46

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

wallabag

csrf

validation

account deletion

EPSS

0.001

Percentile

31.0%

JSON

wallabag/wallabag is vulnerable to Cross-Site Request Forgery (CSRF). The vulnerability exists due to a lack of validations in the account/delete functionality, which allows an attacker to delete a victims account after convincing a user to click a link.