Packagist/wallabag/wallabag CVE-2023-0735: medium 6.5, EPSS 0.30%
Cross-Site Request Forgery (CSRF) in wallabag/wallabag
Action: Upgrade wallabag/wallabag to 2.5.4 or later.
composer require wallabag/wallabag:2.5.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.5.4 | - |
Fixed versions
| 2.5.4 |
Sources
- osv: GHSA-2qxp-xmx6-cq4f
- https://nvd.nist.gov/vuln/detail/CVE-2023-0735
- https://github.com/wallabag/wallabag/commit/268372dbbdd7ef87b84617fdebf95d0a86caf7dc
- https://github.com/wallabag/wallabag
- https://huntr.dev/bounties/8bc78cb1-b10b-4152-842e-ceb999fc5508
CVE-2023-0735 · published · modified · JSON