CVE-2023-0610
1 advisory.
Packagist/wallabag/wallabag CVE-2023-0610: medium 5.4, EPSS 0.44%
wallabag subject to Improper Authorization via annotations
Action: Upgrade wallabag/wallabag to 2.5.3 or later.
composer require wallabag/wallabag:2.5.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0-beta.1 | 2.5.3 | - |
Fixed versions
| 2.5.3 |
Sources
- osv: GHSA-mrqx-mjc4-vfh3
- https://github.com/wallabag/wallabag/security/advisories/GHSA-mrqx-mjc4-vfh3
- https://nvd.nist.gov/vuln/detail/CVE-2023-0610
- https://github.com/wallabag/wallabag/commit/5ac6b6bff9e2e3a87fd88c2904ff3c6aac40722e
- https://github.com/wallabag/wallabag
- https://huntr.dev/bounties/8fdd9b31-d89b-4bbe-9557-20b960faf926
CVE-2023-0610 · published · modified · JSON