firefly-iii Cross-site Request Forgery Vulnerability (CNVD-2021-101215)

firefly-iii is a free and open source personal finance manager. firefly-iii is vulnerable to cross-site request forgery, and no detailed vulnerability details are currently available...