GHSA-7MC4-JP4F-V2J2 Improper Authorization in grumpydictator/firefly-iii

Improper Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0...

CVE-2023-0298

Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0...

Authorization

Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0...

PT-2023-16153

Name of the Vulnerable Software and Affected Versions firefly-iii versions prior to 5.8.0 Description The issue concerns an improper authorization in the firefly-iii repository on GitHub. Recommendations For versions prior to 5.8.0, update to version 5.8.0 or later to resolve the issue...

CVE-2023-0298 Incorrect Authorization in firefly-iii/firefly-iii

Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0...

CVE-2023-0298 Incorrect Authorization in firefly-iii/firefly-iii

Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0...

firefly-iii 授权问题漏洞

firefly-iii is a free and open source personal finance manager. A vulnerability with authorization issues exists in versions of firefly-iii prior to 5.8.0, which stems from its API failing to properly check authorization...

CVE-2023-0298

CVE-2023-0298 affects the Firefly III project in the GitHub repository firefly-iii/firefly-iii, with an vulnerability described as “Incorrect Authorization” in versions prior to 5.8.0. The connected documents consistently identify this as an authorization issue in the API path and confirm the aff...

CVE-2023-0298 Incorrect Authorization in firefly-iii/firefly-iii

Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0...

GHSA-5GQ7-826W-8282 Unrestricted File Upload vulnerability in Firefly III

firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type...

Unrestricted File Upload vulnerability in Firefly III

firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type...

GHSA-PCXQ-28F6-M3FM Firefly III vulnerable to image-based stored XSS

Firefly III before 4.7.17.3 is vulnerable to stored XSS due to lack of filtration of user-supplied data in image file content. The JavaScript code is executed during attachments/view/$fileid$ attachment viewing...

GHSA-5HPW-VCJ2-PRWG Firefly III vulnerable to stored XSS

Firefly III before 4.7.17.3 is vulnerable to stored XSS due to lack of filtration of user-supplied data in image file names. The JavaScript code is executed during attachments/edit/$fileid$ attachment editing...

Firefly III vulnerable to stored XSS

Firefly III before 4.7.17.3 is vulnerable to stored XSS due to lack of filtration of user-supplied data in image file names. The JavaScript code is executed during attachments/edit/$fileid$ attachment editing...

Firefly III vulnerable to image-based stored XSS

Firefly III before 4.7.17.3 is vulnerable to stored XSS due to lack of filtration of user-supplied data in image file content. The JavaScript code is executed during attachments/view/$fileid$ attachment viewing...

GHSA-MRC2-H7Q2-PP97 Firefly III vulnerable to reflected cross-site scripting

Firefly III before 4.7.17.3 is vulnerable to reflected XSS due to lack of filtration of user-supplied data in a search query...

Firefly III vulnerable to reflected cross-site scripting

Firefly III before 4.7.17.3 is vulnerable to reflected XSS due to lack of filtration of user-supplied data in a search query...

GHSA-9XMX-RJ7J-FV9Q Firefly III vulnerable to stored XSS

Firefly III before 4.7.17.1 is vulnerable to stored XSS due to lack of filtration of user-supplied data in a budget name. The JavaScript code is contained in a transaction, and is executed on the tags/show/$tagnumber$ tag summary page. NOTE: It is asserted that an attacker must have the same acce...

Firefly III vulnerable to stored XSS

Firefly III before 4.7.17.1 is vulnerable to stored XSS due to lack of filtration of user-supplied data in a budget name. The JavaScript code is contained in a transaction, and is executed on the tags/show/$tagnumber$ tag summary page. NOTE: It is asserted that an attacker must have the same acce...

Cross Site Request Forgery in firefly-iii

firefly-iii is vulnerable to a Cross-Site Request Forgery CSRF attack which can disable two factor authentication for the target user...