563 matches found
GHSA-PFJ7-W373-GQCH Cross-Site Request Forgery in firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
Cross-Site Request Forgery in firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
GHSA-RQGP-CCPH-5W65 Cross-Site Request Forgery in firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
Cross-Site Request Forgery in firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3901
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3901
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
Cross site request forgery (csrf)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3901
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3901 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3901
CVE-2021-3901 affects firefly-iii: Cross-Site Request Forgery (CSRF) in the web application. The vulnerability arises from insufficient request validation, enabling an attacker to cause unintended actions on behalf of authenticated users. CVSS data in the initial document lists CVSS v3.1 base sco...
CVE-2021-3900
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3900
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
Cross site request forgery (csrf)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3900
CVE-2021-3900 affects firefly-iii and is described in connected sources as a Cross-Site Request Forgery (CSRF) vulnerability. The core issue is that a request could be forged by a logged-in user to perform unwanted actions. Some sources provide a specific exploit scenario: an attacker could, via ...
CVE-2021-3900 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3900: Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
firefly-iii 跨站请求伪造漏洞
firefly-iii is a free open source personal finance manager. firefly-iii suffers from a cross-site request forgery vulnerability. The vulnerability stems from the WEB application not adequately verifying that the request is from a trusted user. An attacker could exploit the vulnerability to send...
CVE-2021-3901: Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
firefly-iii 跨站请求伪造漏洞
firefly-iii is a free and open source personal finance software. firefly-iii suffers from a cross-site request forgery vulnerability, which originates when a WEB application does not sufficiently validate that a request is from a trusted user, and can be exploited by an attacker to send an...
in firefly-iii/firefly-iii
Description Firefly 3 allows users to register OAuth clients. However, Firefly allows duplicate client names to be registered into the application. Hence, attackers from a different account assuming registration is enabled can register a client with duplicate client name and trick the user into...