CVE-2023-0737

Published November 15th, 2024

View on NVD ↗

CVSS v3

6.5

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

wallabag version 2.5.2 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows attackers to arbitrarily delete user accounts via the /account/delete endpoint. This issue is fixed in version 2.5.4.

wallabag/wallabag

wallabag is a self hostable application for saving web pages: Save and classify articles. Read them later. Freely.

GitHub

12.8K