Lucene search
GoogleOSV:GHSA-MWXW-HXVP-4R2RHistoryApr 01, 2023 - 3:30 a.m.
Firefly III vulnerable to improper input validation
2023-04-0103:30:16
Google
osv.dev
4
firefly iii
input validation
vulnerability
software
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
56.3%
Firefly III versions prior to 6.0.0 are vulnerable to improper input validation.
Related
huntr
huntr
HTML injection leads to Open Redirect
2023-02-15 23:07:14
cvelist
cvelist
CVE-2023-1789 Improper Input Validation in firefly-iii/firefly-iii
2023-04-01 00:00:00
nvd
nvd
CVE-2023-1789
2023-04-01 02:15:07
github
github
Firefly III vulnerable to improper input validation
2023-04-01 03:30:16
osv
osv
CVE-2023-1789
2023-04-01 02:15:07
cve
cve
CVE-2023-1789
2023-04-01 02:15:07
prion
prion
Input validation
2023-04-01 02:15:00
veracode
veracode
Cross Site Scripting (XSS)
2023-04-17 12:46:59
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
56.3%
Related for OSV:GHSA-MWXW-HXVP-4R2R