Information Disclosure

grumpydictator/firefly-iii is vulnerable to information disclosure. The attack is due to lack of sanitization of fintsurl parameter in the function configureJob, allowing an attacker to inject arbitrary script through it...