619 matches found
firefly-iii 跨站请求伪造漏洞
firefly-iii is a free open source personal finance manager. A cross-site request forgery vulnerability exists in firefly-iii, which can be exploited by an attacker to send unintended requests to the server...
Improper Input Validation in Firefly III
Firefly III 4.7.17.3 is vulnerable to local file enumeration. An attacker can enumerate local files due to the lack of protocol scheme sanitization, such as for file:/// URLs. This is related to fintsurl to import/job/configuration, and import/create/fints...
GHSA-JJCX-999M-35HC Improper Input Validation in Firefly III
Firefly III 4.7.17.3 is vulnerable to local file enumeration. An attacker can enumerate local files due to the lack of protocol scheme sanitization, such as for file:/// URLs. This is related to fintsurl to import/job/configuration, and import/create/fints...
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
GHSA-XP5Q-77MH-6HM2 firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
GHSA-C676-MCW3-QG55 firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
GHSA-GP6W-CCQV-P7QR firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
firefly-iii Cross-site Request Forgery Vulnerability (CNVD-2021-101213)
firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a cross-site request forgery vulnerability, which can be exploited by attackers to conduct cross-site request forgery attacks...
firefly-iii Cross-site Request Forgery Vulnerability (CNVD-2021-101215)
firefly-iii is a free and open source personal finance manager. firefly-iii is vulnerable to cross-site request forgery, and no detailed vulnerability details are currently available...
firefly-iii Cross-site Request Forgery Vulnerability (CNVD-2021-101214)
firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a cross-site request forgery vulnerability, which can be exploited by attackers to conduct cross-site request forgery attacks...
CVE-2021-3729
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3729
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3728
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3728
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3730
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3730
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
