CVE-2023-0737
CVSS 3.0 Score 6.5 of 10 (medium)
Details
Published Nov 15, 2024
CWE ID 352
Summary
CVE-2023-0737 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Wallabag, a popular read-later application. The issue, present in version 2.5.2, enables attackers to delete user accounts without authorization through the /account/delete endpoint. This security flaw poses a significant risk, as unintended account deletions can result in data loss and other consequences. Users are advised to upgrade to version 2.5.4 to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Wallabag
Affected Vendors
- Wallabag