315 matches found
CVE-2021-3851
firefly-iii is vulnerable to URL Redirection to Untrusted Site...
Design/Logic Flaw
firefly-iii is vulnerable to URL Redirection to Untrusted Site...
CVE-2021-3851
CVE-2021-3851 affects firefly-iii (open-source personal finance app). Connected sources describe an Open Redirect vulnerability in the web application, enabling redirection to untrusted sites during a user flow (notably the bills/store flow where aReferer-based redirect can be manipulated to forw...
CVE-2021-3851 Open Redirect in firefly-iii/firefly-iii
firefly-iii is vulnerable to URL Redirection to Untrusted Site...
CVE-2021-3846 Unrestricted Upload of File with Dangerous Type in firefly-iii/firefly-iii
firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type...
CVE-2021-3846
Firefly-III is reported vulnerable to Unrestricted Upload of File with Dangerous Type. The connected documents identify Firefly-III and an unrestricted upload issue but do not provide concrete technical details (vulnerable component/version, root cause, exploit specifics, or a fixed version) with...
firefly-iii 输入验证错误漏洞
firefly-iii is a free and open source personal finance manager. firefly-iii suffers from an open redirection vulnerability that stems from firefly-iii being susceptible to URL redirection to untrusted sites. No detailed vulnerability details are currently available...
firefly-iii 代码问题漏洞
firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a code issue vulnerability that stems from the program being vulnerable to an unrestricted upload of dangerous types of files. No detailed vulnerability details are currently available...
in firefly-iii/firefly-iii
Description file upload vulnerability in application Proof of Concept step to reproduce 1login to application 2 goto https://demo.firefly-iii.org/create-from-bill/1 3 upload file any kind of file application accept Reference PoC 1 https://i.ibb.co/9wWRnsf/Screenshot-12.png...
Cross-Site Request Forgery in firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF. This has been mitigated in version 5.6.1...
GHSA-356R-77Q8-F64F Cross-Site Request Forgery in firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF. This has been mitigated in version 5.6.1...
firefly-iii cross-site request forgery vulnerability (CNVD-2021-101212)
firefly-iii is a free open source personal finance manager. A cross-site request forgery vulnerability exists in firefly-iii, which can be exploited by an attacker to send unintended requests to the server...
CVE-2021-3819
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3819
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
Cross site request forgery (csrf)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3819
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3819 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3819
CVE-2021-3819 is a Cross-Site Request Forgery (CSRF) vulnerability affecting firefly-iii. The NVD/OSV entries indicate high impact (CVSSv3.1 base score 8.8) with network access, no authentication, and user interaction required, enabling unauthorized requests to the server. The issue is acknowledg...
firefly-iii 跨站请求伪造漏洞
firefly-iii is a free open source personal finance manager. A cross-site request forgery vulnerability exists in firefly-iii, which can be exploited by an attacker to send unintended requests to the server...
Improper Input Validation in Firefly III
Firefly III 4.7.17.3 is vulnerable to local file enumeration. An attacker can enumerate local files due to the lack of protocol scheme sanitization, such as for file:/// URLs. This is related to fintsurl to import/job/configuration, and import/create/fints...