Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

Description there is a CSRF on Run rules again action Proof of Concept // PoC.html history.pushState'', '', '/'...

Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

Description No CSRF in duplicate rule, and modifying the order of the rule group Proof of Concept Click Me! Click Me! Click Me! Impact This vulnerability is capable of tricking admin users to duplicate rule and modifying order of rule groups Permalinks selected with reference to this report:...

firefly-iii code issue vulnerability

firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a code issue vulnerability that stems from the program being vulnerable to an unrestricted upload of dangerous types of files. No detailed vulnerability details are currently available...

firefly-iii open redirect vulnerability

firefly-iii is a free and open source personal finance manager. firefly-iii suffers from an open redirection vulnerability that stems from firefly-iii being susceptible to URL redirection to untrusted sites. No detailed vulnerability details are currently available...

Open Redirect in firefly-iii

firefly-iii is vulnerable to URL Redirection to Untrusted Site...

GHSA-5FVX-5P2R-4MVP Open Redirect in firefly-iii

firefly-iii is vulnerable to URL Redirection to Untrusted Site...

Unrestricted Upload

grumpydictator/firefly-iii allows an Unrestricted Upload of file. Lack of proper handling of temp file to be closed allows an attacker to attach and upload malicious files...

CVE-2021-3846

firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type...

CVE-2021-3851

firefly-iii is vulnerable to URL Redirection to Untrusted Site...

CVE-2021-3846

firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type...

CVE-2021-3851

firefly-iii is vulnerable to URL Redirection to Untrusted Site...

Unrestricted file upload

firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type...

CVE-2021-3846

firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type...

CVE-2021-3851

firefly-iii is vulnerable to URL Redirection to Untrusted Site...

Design/Logic Flaw

firefly-iii is vulnerable to URL Redirection to Untrusted Site...

CVE-2021-3851

CVE-2021-3851 affects firefly-iii (open-source personal finance app). Connected sources describe an Open Redirect vulnerability in the web application, enabling redirection to untrusted sites during a user flow (notably the bills/store flow where aReferer-based redirect can be manipulated to forw...

CVE-2021-3851 Open Redirect in firefly-iii/firefly-iii

firefly-iii is vulnerable to URL Redirection to Untrusted Site...

CVE-2021-3846

Firefly-III is reported vulnerable to Unrestricted Upload of File with Dangerous Type. The connected documents identify Firefly-III and an unrestricted upload issue but do not provide concrete technical details (vulnerable component/version, root cause, exploit specifics, or a fixed version) with...

CVE-2021-3846 Unrestricted Upload of File with Dangerous Type in firefly-iii/firefly-iii

firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type...

firefly-iii 输入验证错误漏洞

firefly-iii is a free and open source personal finance manager. firefly-iii suffers from an open redirection vulnerability that stems from firefly-iii being susceptible to URL redirection to untrusted sites. No detailed vulnerability details are currently available...