{"action":"Upgrade wallabag/wallabag to 2.5.3 or later.","affected":[{"fixed":"2.5.3","introduced":"2.0.0-beta.1"}],"component":"wallabag/wallabag","cve_ids":["CVE-2023-0610"],"ecosystem":"Packagist","epss":0.00444,"exploited":false,"fixed_versions":["2.5.3"],"ghsa_id":"GHSA-mrqx-mjc4-vfh3","id":"tcs_01M5KF5TTGDYB44W2PYSG441DR","modified_at":"2024-12-07T05:38:52.391771Z","published_at":"2023-02-02T19:26:47Z","references":["https://osv.dev/vulnerability/GHSA-mrqx-mjc4-vfh3","https://github.com/wallabag/wallabag/security/advisories/GHSA-mrqx-mjc4-vfh3","https://nvd.nist.gov/vuln/detail/CVE-2023-0610","https://github.com/wallabag/wallabag/commit/5ac6b6bff9e2e3a87fd88c2904ff3c6aac40722e","https://github.com/wallabag/wallabag","https://huntr.dev/bounties/8fdd9b31-d89b-4bbe-9557-20b960faf926"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-mrqx-mjc4-vfh3","url":"https://osv.dev/vulnerability/GHSA-mrqx-mjc4-vfh3"}],"summary":"wallabag subject to Improper Authorization via annotations"}