CVE-2023-0737 - Wallabag CSRF Account Deletion

CVE ID : CVE-2023-0737
Published : Nov. 15, 2024, 11:15 a.m. | 24 minutes ago
Description : wallabag version 2.5.2 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows attackers to arbitrarily delete user accounts via the /account/delete endpoint. This issue is fixed in version 2.5.4.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...