CVE-2023-0737
1 advisory.
Packagist/wallabag/wallabag CVE-2023-0737: medium 6.5
CSRF leading to delete account in wallabag/wallabag
Action: Upgrade wallabag/wallabag to 2.5.4 or later.
composer require wallabag/wallabag:2.5.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.5.4 | - |
Fixed versions
| 2.5.4 |
Sources
- osv: GHSA-99w8-c5f6-96pp
- https://nvd.nist.gov/vuln/detail/CVE-2023-0737
- https://github.com/wallabag/wallabag/commit/268372dbbdd7ef87b84617fdebf95d0a86caf7dc
- https://github.com/wallabag/wallabag
- https://huntr.com/bounties/4ba20fe7-4061-4dfb-ab2f-ecaf110641a5
CVE-2023-0737 · published · modified · JSON