CVE-2023-0610: Improper Authorization

February 1, 2023 (updated February 8, 2023)

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3.

References

github.com/advisories/GHSA-mrqx-mjc4-vfh3
github.com/wallabag/wallabag/commit/5ac6b6bff9e2e3a87fd88c2904ff3c6aac40722e
github.com/wallabag/wallabag/security/advisories/GHSA-mrqx-mjc4-vfh3
huntr.dev/bounties/8fdd9b31-d89b-4bbe-9557-20b960faf926
nvd.nist.gov/vuln/detail/CVE-2023-0610

Detect and mitigate CVE-2023-0610 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →