CVE-2023-4454

MediumCVSS 5.7/10Last modified Jun 17, 2026

Description

Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3.

Metrics

CVSS 3.1 5.7/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-352

Affected software

Vendor	Product	Versions
wallabag	wallabag/wallabag	>= unspecified, < 2.6.3
wallabag	wallabag	< 2.6.3

References

https://github.com/wallabag/wallabag/commit/78b0b55c40511e1f22d5bbb4897aa10fca68441cPatch
https://huntr.dev/bounties/4ee0ef74-e4d4-46e7-a05c-076bce522299Exploit, Patch, Third Party Advisory
https://github.com/wallabag/wallabag/commit/78b0b55c40511e1f22d5bbb4897aa10fca68441cPatch
https://huntr.dev/bounties/4ee0ef74-e4d4-46e7-a05c-076bce522299Exploit, Patch, Third Party Advisory

Timeline

Published: Aug 21, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-44556.5Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3.CVE-2023-44566.5A flaw was found in openshift-logging LokiStack. The key used for caching is just the token, which is too broad. This issue allows a user wi CVE-2023-44577.5Grafana is an open-source platform for monitoring and observability. The Google Sheets data source plugin for Grafana, versions 0.9.0 to 1.CVE-2023-44587.5A flaw was found within the parsing of extended attributes in the kernel ksmbd module. The issue results from the lack of proper validation CVE-2023-44595.5A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxn CVE-2023-44605.4The Uploading SVG, WEBP and ICO files WordPress plugin through 1.2.1 does not sanitise uploaded SVG files, which could allow users with a ro CVE-2023-44625.9A vulnerability classified as problematic has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 5 CVE-2023-44637.5A vulnerability classified as problematic was found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60. This vulnerability affects unknown cod CVE-2023-44647.2A vulnerability, which was classified as critical, has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 5 CVE-2023-44656.5A vulnerability, which was classified as problematic, was found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500 CVE-2023-44664.9A vulnerability has been found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60 and classified as problematic. Affected by this vulnerabilit CVE-2023-44676.6A vulnerability was found in Poly Trio 8800 7.2.6.0019 and classified as critical. Affected by this issue is some unknown functionality of t