Lucene search
+L

314 matches found

Github Security Blog
Github Security Blog
added 2023/04/05 6:30 p.m.19 views

Firefly III insufficiently expires sessions

Firefly III prior to 6.0.0 insufficiently expires sessions upon close...

9.8CVSS8.9AI score0.00438EPSS
SaveExploits0References4Affected Software1
Prion
Prion
added 2023/04/05 4:15 p.m.18 views

Session fixation

Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6...

5.5CVSS9.5AI score0.00438EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2023/04/05 12:00 a.m.9 views

firefly-iii 代码问题漏洞

firefly-iii is a free and open source personal finance manager. A code issue vulnerability exists in versions prior to firefly-iii 6, which stems from the presence of an insufficient session expiration time...

9.8CVSS6.4AI score0.00438EPSS
SaveExploits0References3
OSV
OSV
added 2023/04/05 12:00 a.m.23 views

CVE-2023-1788 Insufficient Session Expiration in firefly-iii/firefly-iii

Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6...

5.4CVSS5.9AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2023/04/05 12:00 a.m.5 views

CVE-2023-1788 Insufficient Session Expiration in firefly-iii/firefly-iii

Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6...

5.4CVSS7.4AI score0.00438EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/04/05 12:00 a.m.39 views

CVE-2023-1788 Insufficient Session Expiration in firefly-iii/firefly-iii

Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6...

5.4CVSS9.8AI score0.00438EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/04/05 12:00 a.m.5 views

PT-2023-17246 · Unknown · Firefly-Iii

Name of the Vulnerable Software and Affected Versions: Firefly III versions prior to 6.0.0 Description: The issue is related to insufficient session expiration in the Firefly III GitHub repository. This means that sessions are not properly closed after a certain period of inactivity or when a use...

9.8CVSS5.5AI score0.00438EPSS
SaveExploits0References8
CVE
CVE
added 2023/04/05 12:00 a.m.74 views

CVE-2023-1788

CVE-2023-1788 affects Firefly III (firefly-iii/firefly-iii) prior to version 6.0.0, where sessions do not expire promptly after inactivity or on close. The issue is described as insufficient session expiration and is reflected in multiple sources (Red Hat advisory, GitHub advisory, GHSA, OSV, NVD...

9.8CVSS7.3AI score0.00438EPSS
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2023/04/01 3:30 a.m.25 views

Firefly III vulnerable to improper input validation

Firefly III versions prior to 6.0.0 are vulnerable to improper input validation...

9.8CVSS8.9AI score0.00335EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2023/04/01 3:30 a.m.24 views

GHSA-MWXW-HXVP-4R2R Firefly III vulnerable to improper input validation

Firefly III versions prior to 6.0.0 are vulnerable to improper input validation...

5.9CVSS7AI score0.00335EPSS
SaveExploits0References5
NVD
NVD
added 2023/04/01 2:15 a.m.19 views

CVE-2023-1789

Improper Input Validation in GitHub repository firefly-iii/firefly-iii prior to 6.0.0...

9.8CVSS6.3AI score0.00335EPSS
SaveExploits0References2
Prion
Prion
added 2023/04/01 2:15 a.m.15 views

Input validation

Improper Input Validation in GitHub repository firefly-iii/firefly-iii prior to 6.0.0...

3.8CVSS9.5AI score0.00335EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/04/01 12:00 a.m.7 views

PT-2023-17247 · Unknown · Firefly-Iii

Name of the Vulnerable Software and Affected Versions: firefly-iii/firefly-iii versions prior to 6.0.0 Description: The issue is related to improper input validation in the firefly-iii/firefly-iii GitHub repository. Recommendations: For versions prior to 6.0.0, update to version 6.0.0 or later to...

9.8CVSS5.4AI score0.00335EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2023/04/01 12:00 a.m.9 views

firefly-iii 输入验证错误漏洞

firefly-iii is a free and open source personal finance manager. An input validation error vulnerability exists in firefly-iii versions prior to 6.0.0 that stems from improper input validation...

9.8CVSS6.3AI score0.00335EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/04/01 12:00 a.m.32 views

CVE-2023-1789 Improper Input Validation in firefly-iii/firefly-iii

Improper Input Validation in GitHub repository firefly-iii/firefly-iii prior to 6.0.0...

5.2CVSS9.8AI score0.00335EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/04/01 12:00 a.m.6 views

CVE-2023-1789 Improper Input Validation in firefly-iii/firefly-iii

Improper Input Validation in GitHub repository firefly-iii/firefly-iii prior to 6.0.0...

5.2CVSS9.6AI score0.00335EPSS
SaveExploits0References2
CVE
CVE
added 2023/04/01 12:00 a.m.52 views

CVE-2023-1789

CVE-2023-1789 affects firefly-iii/firefly-iii prior to 6.0.0. The root cause is improper input validation in the GitHub repository, leading to potential manipulation or disclosure paths. Public sources assign a high-severity impact (NVD CVSS 3.1 base score 9.8: Critical for confidentiality, integ...

9.8CVSS7.2AI score0.00335EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/04/01 12:00 a.m.15 views

CVE-2023-1789 Improper Input Validation in firefly-iii/firefly-iii

Improper Input Validation in GitHub repository firefly-iii/firefly-iii prior to 6.0.0...

5.2CVSS5.8AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2023/01/14 9:30 a.m.30 views

Improper Authorization in grumpydictator/firefly-iii

Improper Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0...

6.5CVSS6.3AI score0.00625EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2023/01/14 9:30 a.m.57 views

GHSA-7MC4-JP4F-V2J2 Improper Authorization in grumpydictator/firefly-iii

Improper Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0...

6.5CVSS6.4AI score0.00625EPSS
SaveExploits1References4
Rows per page
Query Builder