{"action":"Upgrade wallabag/wallabag to 2.5.4 or later.","affected":[{"fixed":"2.5.4","introduced":"0"}],"component":"wallabag/wallabag","cve_ids":["CVE-2023-0734"],"ecosystem":"Packagist","epss":0.00498,"exploited":false,"fixed_versions":["2.5.4"],"ghsa_id":"GHSA-8ccw-f83g-v7g3","id":"tcs_01M5KEYY4HF3861Y72B9N32NDV","modified_at":"2024-02-16T08:23:49.693542Z","published_at":"2023-03-05T21:30:14Z","references":["https://osv.dev/vulnerability/GHSA-8ccw-f83g-v7g3","https://nvd.nist.gov/vuln/detail/CVE-2023-0734","https://github.com/wallabag/wallabag/commit/acd285dcbb71b595e6320bb1d0d3a44cdf646ac0","https://github.com/wallabag/wallabag","https://github.com/wallabag/wallabag/releases/tag/2.5.4","https://huntr.dev/bounties/a296324c-6925-4f5f-a729-39b0d73d5b8b"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-8ccw-f83g-v7g3","url":"https://osv.dev/vulnerability/GHSA-8ccw-f83g-v7g3"}],"summary":"Wallabag Improper Authorization vulnerability"}