CVE-2023-4455

MediumCVSS 6.5

Published: 21/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

19th percentile - higher than 19% of all known CVEs

Summary

A Cross-Site Request Forgery (CSRF) vulnerability exists in the GitHub repository wallabag/wallabag prior to version 2.6.3. This allows attackers to send unauthorized requests on behalf of users.

Risk Assessment

This vulnerability may lead to unauthorized access to user data and execution of unwanted actions within the application. Organizations should be aware of the risks associated with potential exploitation of this flaw.

Recommendation

It is recommended to upgrade to version 2.6.3 or later to mitigate this vulnerability. Additionally, implementing CSRF protection mechanisms is advisable.

Original NVD description (English source)

Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3.