563 matches found
Firefly III vulnerable to stored XSS
Firefly III before 4.7.17.3 is vulnerable to stored XSS due to lack of filtration of user-supplied data in image file names. The JavaScript code is executed during attachments/edit/$fileid$ attachment editing...
GHSA-MRC2-H7Q2-PP97 Firefly III vulnerable to reflected cross-site scripting
Firefly III before 4.7.17.3 is vulnerable to reflected XSS due to lack of filtration of user-supplied data in a search query...
Firefly III vulnerable to reflected cross-site scripting
Firefly III before 4.7.17.3 is vulnerable to reflected XSS due to lack of filtration of user-supplied data in a search query...
GHSA-9XMX-RJ7J-FV9Q Firefly III vulnerable to stored XSS
Firefly III before 4.7.17.1 is vulnerable to stored XSS due to lack of filtration of user-supplied data in a budget name. The JavaScript code is contained in a transaction, and is executed on the tags/show/$tagnumber$ tag summary page. NOTE: It is asserted that an attacker must have the same acce...
Firefly III vulnerable to stored XSS
Firefly III before 4.7.17.1 is vulnerable to stored XSS due to lack of filtration of user-supplied data in a budget name. The JavaScript code is contained in a transaction, and is executed on the tags/show/$tagnumber$ tag summary page. NOTE: It is asserted that an attacker must have the same acce...
Cross Site Request Forgery in firefly-iii
firefly-iii is vulnerable to a Cross-Site Request Forgery CSRF attack which can disable two factor authentication for the target user...
firefly-iii Cross-Site Request Forgery Vulnerability
firefly-iii is a free open source personal finance manager. A cross-site request forgery vulnerability exists in firefly-ii, which can be exploited by attackers to launch cross-site request forgery CSRF attacks...
GHSA-G6VQ-WC8W-4G69 firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4005
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4005
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4005
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
Cross site request forgery (csrf)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4005 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4005
CVE-2021-4005 affects the Firefly-III project and is a Cross-Site Request Forgery (CSRF) vulnerability. Multiple connected records (OSV, GHSA, Red Hat, CNVD, CNVD-CNVD, CNVD-202112-206) describe firefly-iii as vulnerable to CSRF; OSV notes that the CSRF could disable two-factor authentication for...
firefly-iii 跨站请求伪造漏洞
firefly-iii is a free open source personal finance manager. A cross-site request forgery vulnerability exists in firefly-ii, which can be exploited by attackers to launch cross-site request forgery CSRF attacks...
CVE-2021-4005: Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
Cross-site Request Forgery (CSRF)
grumpydictator/firefly-iii is vulnerable to cross-site request forgery. The vulnerability is capable of tricking users to switch transaction links and unknowingly perform unwanted actions on malicious websites...