Wallabag
9 CVEs across 2 Wallabag products. Browse Wallabag vulnerabilities, severities, and proof-of-concept exploits.
Wallabag products with known CVEs
Wallabag CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2023-0737 | Medium | 6.5 | 2024-11-15 | wallabag version 2.5.2 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows attackers to arbitrarily delete user accounts via the /account/de… |
CVE-2023-4455 | Medium | 6.5 | 2023-08-21 | Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3. |
CVE-2023-4454 | Medium | 5.7 | 2023-08-21 | Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3. |
CVE-2023-3566 | Low | 3.5 | 2023-07-10 | A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /confi… |
CVE-2023-0734 | Medium | 5.3 | 2023-03-05 | Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.4. |
CVE-2023-0736 | Medium | 5.4 | 2023-02-07 | Cross-site Scripting (XSS) - Stored in GitHub repository wallabag/wallabag prior to 2.5.4. |
CVE-2023-0735 | Medium | 6.5 | 2023-02-07 | Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.5.4. |
CVE-2023-0610 | Medium | 4.3 | 2023-02-01 | Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3. |
CVE-2023-0609 | Medium | 4.3 | 2023-02-01 | Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3. |
CVE-2018-11352 | Medium | 4.0 | 2018-09-21 | The Wallabag application 2.2.3 to 2.3.2 is affected by one cross-site scripting (XSS) vulnerability that is stored within the configuration page. This vulnerab… |