Lucene search

K
osvGoogleOSV:GHSA-MRC2-H7Q2-PP97
HistoryMay 24, 2022 - 4:50 p.m.

Firefly III vulnerable to reflected cross-site scripting

2022-05-2416:50:37
Google
osv.dev
5
firefly iii
reflected xss
vulnerability
user-supplied data
search query
software

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

21.4%

Firefly III before 4.7.17.3 is vulnerable to reflected XSS due to lack of filtration of user-supplied data in a search query.

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

21.4%

Related for OSV:GHSA-MRC2-H7Q2-PP97