CVE-2023-4455
1 advisory.
Packagist/wallabag/wallabag CVE-2023-4455: medium 6.5
Wallabag user can delete own API client unintentionally
Action: Upgrade wallabag/wallabag to 2.6.3 or later.
composer require wallabag/wallabag:2.6.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0-alpha.1 | 2.6.3 | - |
Fixed versions
| 2.6.3 |
Sources
- osv: GHSA-gjvc-55fw-v6vq
- https://github.com/wallabag/wallabag/security/advisories/GHSA-gjvc-55fw-v6vq
- https://github.com/wallabag/wallabag/commit/ffcc5c9062fcc8cd922d7d6d65edbe5efae96806
- https://github.com/wallabag/wallabag
- https://huntr.dev/bounties/5ab1b206-5fe8-4737-b275-d705e76f193a
CVE-2023-4455 · published · modified · JSON