CVE-2023-3566

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /config of the component Profile Config. The manipulation of the argument Name leads to allocation of resources. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-233359. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-770

Affected software

No affected versions have been published.

Timeline

Published
Jul 10, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-356606.7In lwis_transaction_client_cleanup of lwis_transaction.c, there is a possible way to corrupt memory due to a use after free. This could leadCVE-2023-356617.5In ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead CVE-2023-356629.8there is a possible out of bounds write due to buffer overflow. This could lead to remote code execution with no additional execution privilCVE-2023-356637.5In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote inforCVE-2023-356645.5In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to locCVE-2023-356657.8In multiple files, there is a possible way to import a contact from another user due to a missing permission check. This could lead to localCVE-2023-356667.8In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the code. This could lead to local escalation CVE-2023-356677.8In updateList of NotificationAccessSettings.java, there is a possible way to hide approved notification listeners in the settings due to a lCVE-2023-356685.5In visitUris of Notification.java, there is a possible way to display images from another user due to a confused deputy. This could lead to CVE-2023-356697.8In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to control other running activities due to unsafe CVE-2023-35677.1A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attackerCVE-2023-356707.8In computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private directories due to a pat
CVE-2023-3566: Medium severity, CVSS 6.5 | Vulnix