Withdrawn: wallabag subject to Improper Authorization via annotations · GHSA-xrw3-wqph-3fxg · GitHub Advisory Database · GitHub

Withdrawn: wallabag subject to Improper Authorization via annotations

Moderate severity GitHub Reviewed Published Feb 1, 2023 to the GitHub Advisory Database • Updated Feb 8, 2023

Withdrawn This advisory was withdrawn on Feb 2, 2023

Package

wallabag/wallabag (Composer)

Affected versions

>= 2.0.0-beta.1, < 2.5.3

Patched versions

2.5.3

Description

Duplicate advisory

This advisory has been withdrawn because it is a duplicate of GHSA-mrqx-mjc4-vfh3. This link is maintained to preserve external references.

Original Description

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3.

References

Published by the National Vulnerability Database Feb 1, 2023

Published to the GitHub Advisory Database Feb 1, 2023

Reviewed Feb 2, 2023

Withdrawn Feb 2, 2023

Last updated Feb 8, 2023

Severity

Moderate

4.3

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

Low

User interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N