CVE-2023-3566

CVE-2023-3566 is a resource allocation vulnerability affecting wallabag version 2.5.4, specifically within the Profile Config component's /config file when manipulating the 'Name' argument. This medium-severity vulnerability (CVSS 6.5) can lead to denial of service (A:H) with low attack complexity and no user interaction required, making it easily exploitable by an authenticated attacker over the network. While the exploit has been publicly disclosed, there is no evidence of active exploitation, and it lacks significant community discussion or media coverage. The vendor has not responded to disclosure attempts.