563 matches found
CVE-2021-3851: URL Redirection to Untrusted Site
firefly-iii is vulnerable to URL Redirection to Untrusted Site...
CVE-2021-3846: Unrestricted Upload of File with Dangerous Type
firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type...
firefly-iii 代码问题漏洞
firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a code issue vulnerability that stems from the program being vulnerable to an unrestricted upload of dangerous types of files. No detailed vulnerability details are currently available...
in firefly-iii/firefly-iii
Description file upload vulnerability in application Proof of Concept step to reproduce 1login to application 2 goto https://demo.firefly-iii.org/create-from-bill/1 3 upload file any kind of file application accept Reference PoC 1 https://i.ibb.co/9wWRnsf/Screenshot-12.png...
Cross-Site Request Forgery in firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF. This has been mitigated in version 5.6.1...
GHSA-356R-77Q8-F64F Cross-Site Request Forgery in firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF. This has been mitigated in version 5.6.1...
firefly-iii cross-site request forgery vulnerability (CNVD-2021-101212)
firefly-iii is a free open source personal finance manager. A cross-site request forgery vulnerability exists in firefly-iii, which can be exploited by an attacker to send unintended requests to the server...
CVE-2021-3819
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3819
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
Cross site request forgery (csrf)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3819
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3819
CVE-2021-3819 is a Cross-Site Request Forgery (CSRF) vulnerability affecting firefly-iii. The NVD/OSV entries indicate high impact (CVSSv3.1 base score 8.8) with network access, no authentication, and user interaction required, enabling unauthorized requests to the server. The issue is acknowledg...
CVE-2021-3819 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3819: Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
firefly-iii 跨站请求伪造漏洞
firefly-iii is a free open source personal finance manager. A cross-site request forgery vulnerability exists in firefly-iii, which can be exploited by an attacker to send unintended requests to the server...
Improper Input Validation in Firefly III
Firefly III 4.7.17.3 is vulnerable to local file enumeration. An attacker can enumerate local files due to the lack of protocol scheme sanitization, such as for file:/// URLs. This is related to fintsurl to import/job/configuration, and import/create/fints...
GHSA-JJCX-999M-35HC Improper Input Validation in Firefly III
Firefly III 4.7.17.3 is vulnerable to local file enumeration. An attacker can enumerate local files due to the lack of protocol scheme sanitization, such as for file:/// URLs. This is related to fintsurl to import/job/configuration, and import/create/fints...
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...