MEDIUM6.5CVE-2023-0737CSRF leading to delete account in wallabag/wallabag from 0, < 2.5.4
MEDIUM6.5CVE-2023-4455Wallabag user can delete own API client unintentionally >= 2.0.0-alpha.1, < 2.6.3
MEDIUM6.5CVE-2023-3566Wallabag vulnerable to Allocation of Resources Without Limits or Throttling from 0, <= 2.5.4
MEDIUM6.5CVE-2023-0735Cross-Site Request Forgery (CSRF) in wallabag/wallabag from 0, < 2.5.4
MEDIUM6.5wallabag contains Improper Authorization via export feature
>= 2.0.0-alpha.1, < 2.5.3
MEDIUM5.7Wallabag user can reset data unintentionally
>= 2.0.0-alpha.1, < 2.6.3
MEDIUM5.4Cross-site Scripting (XSS) in wallabag/wallabag
from 0, < 2.5.4
MEDIUM5.4wallabag subject to Improper Authorization via annotations
>= 2.0.0-beta.1, < 2.5.3
MEDIUM5.3Wallabag Improper Authorization vulnerability
from 0, < 2.5.4
MEDIUM4.0Wallabag cross-site scripting (XSS) vulnerability
>= 2.2.3, < 2.3.3