Security
فارسی
All products

wallabag/wallabag

Composer · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
wallabag/wallabag Has Multiple Cross-Site Request Forgery (CSRF) VulnerabilitiesGHSA-5PM7-CP8F-P2C2 wallabag/wallabag Composer Medium Fix reported
Wallabag user can disable 2FA unintentionallyGHSA-56FM-HFP3-X3W3 wallabag/wallabag Composer Medium Fix reported
wallabag subject to Improper Authorization via annotationsCVE-2023-0610 · GHSA-MRQX-MJC4-VFH3 wallabag/wallabag Composer Medium Fix reported
CSRF leading to delete account in wallabag/wallabagCVE-2023-0737 · GHSA-99W8-C5F6-96PP wallabag/wallabag Composer Medium Fix reported
Wallabag Improper Authorization vulnerabilityCVE-2023-0734 · GHSA-8CCW-F83G-V7G3 wallabag/wallabag Composer Medium Fix reported
Wallabag cross-site scripting (XSS) vulnerabilityCVE-2018-11352 · GHSA-GVCW-X64M-PFCJ wallabag/wallabag Composer Medium Fix reported
Wallabag vulnerable to Allocation of Resources Without Limits or ThrottlingCVE-2023-3566 · GHSA-6QQ7-3HQC-P5W4 wallabag/wallabag Composer Medium No fix reported
Wallabag user can reset data unintentionally CVE-2023-4454 · GHSA-P8GP-899C-JVQ9 wallabag/wallabag Composer Medium Fix reported
Wallabag user can delete own API client unintentionallyCVE-2023-4455 · GHSA-GJVC-55FW-V6VQ wallabag/wallabag Composer Medium Fix reported
wallabag contains Improper Authorization via export featureCVE-2023-0609 · GHSA-QWX8-MXXX-MG96 wallabag/wallabag Composer Medium Fix reported
Cross-Site Request Forgery (CSRF) in wallabag/wallabagCVE-2023-0735 · GHSA-2QXP-XMX6-CQ4F wallabag/wallabag Composer Medium Fix reported
Cross-site Scripting (XSS) in wallabag/wallabag CVE-2023-0736 · GHSA-3X2C-87CQ-QX49 wallabag/wallabag Composer Medium Fix reported