← All advisories

Medium severity5.7NVD Advisory· Published Aug 21, 2023· Updated Jun 17, 2026

CVE-2023-4454

CVE-2023-4454

Description

Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
wallabag/wallabagPackagist	>= 2.0.0-alpha.1, < 2.6.3	2.6.3

Affected products

2

ghsa-coords
pkg:composer/wallabag/wallabag
Range: >= 2.0.0-alpha.1, < 2.6.3
Walla Telesite/Wallabag/wallabagv5
Range: unspecified

Patches

Vulnerability mechanics

References

4

github.com/wallabag/wallabag/commit/78b0b55c40511e1f22d5bbb4897aa10fca68441cnvdPatchWEB
huntr.dev/bounties/4ee0ef74-e4d4-46e7-a05c-076bce522299nvdExploitPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-p8gp-899c-jvq9ghsaADVISORY
github.com/wallabag/wallabag/security/advisories/GHSA-p8gp-899c-jvq9ghsaWEB

News mentions

0

No linked articles in our index yet.