GHSA-6qq7-3hqc-p5w4

Source

https://github.com/advisories/GHSA-6qq7-3hqc-p5w4

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/07/GHSA-6qq7-3hqc-p5w4/GHSA-6qq7-3hqc-p5w4.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-6qq7-3hqc-p5w4

Aliases

CVE-2023-3566

Published

2023-07-10T18:30:49Z

Modified

2024-02-16T08:13:43.360048Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Wallabag vulnerable to Allocation of Resources Without Limits or Throttling

Details

A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /config of the component Profile Config. The manipulation of the argument Name leads to allocation of resources. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-233359. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Database specific

{
    "nvd_published_at": "2023-07-10T16:15:56Z",
    "cwe_ids": [
        "CWE-770"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "github_reviewed_at": "2023-07-10T21:52:53Z"
}

References

Affected packages

Packagist / wallabag/wallabag

Package

Name: wallabag/wallabag
Purl: pkg:composer/wallabag/wallabag

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

2.5.4

Affected versions

1.*

1.0-beta1

1.0-beta2

1.0-beta3

1.0-beta4

1.0-beta5

1.0-beta5.1

1.0-beta5.2

1.0.0

1.1.0

1.2.0

1.3.0

1.3.1

1.4.0

1.5.0

1.5.1

1.5.1.1

1.5.2

1.6.0

1.6.1b

1.6.1

1.7.0

1.7.1

1.7.2

1.8.0

1.8.1b

1.8.1

1.9beta

1.9beta2

1.9RC1

1.9

1.9.1alpha1

1.9.1alpha2

1.9.1-b

1.9.1beta1

1.9.1beta2

1.9.1beta3

1.9.1

1.9.2

2.*

2.0.0-alpha.0

2.0.0-alpha.1

2.0.0-alpha.2

2.0.0-beta.1

2.0.0-beta.2

2.0.0

2.0.1

2.0.2

2.0.3

2.0.4

2.0.5

2.0.6

2.0.7

2.0.8

2.1.0

2.1.1

2.1.2

2.1.3

2.1.4

2.1.5

2.1.6

2.1.6.1

2.2.0

2.2.1

2.2.2

2.2.3

2.3.0

2.3.1

2.3.2

2.3.3

2.3.4

2.3.5

2.3.6

2.3.7

2.3.8

2.4.0

2.4.1

2.4.2

2.4.3

2.5.0

2.5.1

2.5.2

2.5.3

2.5.4