315 matches found
CVE-2021-3900
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
Cross site request forgery (csrf)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3900
CVE-2021-3900 affects firefly-iii and is described in connected sources as a Cross-Site Request Forgery (CSRF) vulnerability. The core issue is that a request could be forged by a logged-in user to perform unwanted actions. Some sources provide a specific exploit scenario: an attacker could, via ...
CVE-2021-3900 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
firefly-iii 跨站请求伪造漏洞
firefly-iii is a free and open source personal finance software. firefly-iii suffers from a cross-site request forgery vulnerability, which originates when a WEB application does not sufficiently validate that a request is from a trusted user, and can be exploited by an attacker to send an...
firefly-iii 跨站请求伪造漏洞
firefly-iii is a free open source personal finance manager. firefly-iii suffers from a cross-site request forgery vulnerability. The vulnerability stems from the WEB application not adequately verifying that the request is from a trusted user. An attacker could exploit the vulnerability to send...
in firefly-iii/firefly-iii
Description Firefly 3 allows users to register OAuth clients. However, Firefly allows duplicate client names to be registered into the application. Hence, attackers from a different account assuming registration is enabled can register a client with duplicate client name and trick the user into...
Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
Description there is a CSRF on Run rules again action Proof of Concept // PoC.html history.pushState'', '', '/'...
Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
Description No CSRF in duplicate rule, and modifying the order of the rule group Proof of Concept Click Me! Click Me! Click Me! Impact This vulnerability is capable of tricking admin users to duplicate rule and modifying order of rule groups Permalinks selected with reference to this report:...
firefly-iii code issue vulnerability
firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a code issue vulnerability that stems from the program being vulnerable to an unrestricted upload of dangerous types of files. No detailed vulnerability details are currently available...
firefly-iii open redirect vulnerability
firefly-iii is a free and open source personal finance manager. firefly-iii suffers from an open redirection vulnerability that stems from firefly-iii being susceptible to URL redirection to untrusted sites. No detailed vulnerability details are currently available...
Open Redirect in firefly-iii
firefly-iii is vulnerable to URL Redirection to Untrusted Site...
GHSA-5FVX-5P2R-4MVP Open Redirect in firefly-iii
firefly-iii is vulnerable to URL Redirection to Untrusted Site...
Unrestricted Upload
grumpydictator/firefly-iii allows an Unrestricted Upload of file. Lack of proper handling of temp file to be closed allows an attacker to attach and upload malicious files...
CVE-2021-3846
firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type...
CVE-2021-3846
firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type...
CVE-2021-3851
firefly-iii is vulnerable to URL Redirection to Untrusted Site...
CVE-2021-3851
firefly-iii is vulnerable to URL Redirection to Untrusted Site...
