CyberRota Analysis
AI-GeneratedWallos versions prior to 4.9.4 are vulnerable to an OpenID Connect (OIDC) state nonce verification flaw, allowing attackers to exploit the session management by redirecting victims to a malicious URL. This can result in unauthorized access to the attacker's account using the victim's credentials. Organizations using Wallos should prioritize updating to version 4.9.4 to mitigate the risk of account takeover.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.4, login.php generates an OIDC state nonce stored in $_SESSION['oidc_state'], but checksession.php dispatches the OIDC callback without comparing the incoming state against the session value. An attacker can trick a victim into visiting a crafted URL, causing Wallos to exchange the attacker's authorization code and log the victim into the attacker's account. This issue has been patched in version 4.9.4.