619 matches found
Firefly III Security Vulnerability
Firefly III is an open source personal finance management system. A security vulnerability exists in Firefly III before 6.1.1, which stems from allowing webhooks HTML injection...
CVE-2024-22075: Improper Neutralization of Input During Web Page Generation
Firefly III aka firefly-iii before 6.1.1 allows webhooks HTML Injection...
CVE-2024-22075
Firefly III aka firefly-iii before 6.1.1 allows webhooks HTML Injection...
CVE-2024-22075
Firefly III aka firefly-iii before 6.1.1 allows webhooks HTML Injection...
Malicious code in firefly-utilities-helper-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7d1e40a9479f8d7f46dde5d530c7da4a5ac550607ec867806525a3bb749d6e76 The OpenSSF Package Analysis project identified 'firefly-utilities-helper-ts' @ 1.1.14 npm as malicious. It is considered malicious because: - T...
Malicious code in @marcomayo.com/firefly-shared-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a546d2e7e1826bee115fabca6b2802aab96ca9f227b6998e3ff64ca63459fc00 The OpenSSF Package Analysis project identified '@marcomayo.com/firefly-shared-js' @ 1.999.0 npm as malicious. It is considered malicious becaus...
Malicious code in firefly-shared-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 540259a2eb130bcb8b4596b7a6458b6290bd5dd6b8846751f0475931083f7594 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...
GHSA-H7VV-46P5-PRMH Firefly III insufficiently expires sessions
Firefly III prior to 6.0.0 insufficiently expires sessions upon close...
Firefly III insufficiently expires sessions
Firefly III prior to 6.0.0 insufficiently expires sessions upon close...
Session fixation
Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6...
firefly-iii 代码问题漏洞
firefly-iii is a free and open source personal finance manager. A code issue vulnerability exists in versions prior to firefly-iii 6, which stems from the presence of an insufficient session expiration time...
CVE-2023-1788
Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6...
CVE-2023-1788 Insufficient Session Expiration in firefly-iii/firefly-iii
Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6...
CVE-2023-1788 Insufficient Session Expiration in firefly-iii/firefly-iii
Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6...
CVE-2023-1788 Insufficient Session Expiration in firefly-iii/firefly-iii
Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6...
PT-2023-17246 · Unknown · Firefly-Iii
Name of the Vulnerable Software and Affected Versions: Firefly III versions prior to 6.0.0 Description: The issue is related to insufficient session expiration in the Firefly III GitHub repository. This means that sessions are not properly closed after a certain period of inactivity or when a use...
CVE-2023-1788
CVE-2023-1788 affects Firefly III (firefly-iii/firefly-iii) prior to version 6.0.0, where sessions do not expire promptly after inactivity or on close. The issue is described as insufficient session expiration and is reflected in multiple sources (Red Hat advisory, GitHub advisory, GHSA, OSV, NVD...
CVE-2023-1788: Insufficient Session Expiration
Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6...