CVE-2021-3851

firefly-iii is vulnerable to URL Redirection to Untrusted Site...

CVE-2021-3851

firefly-iii is vulnerable to URL Redirection to Untrusted Site...

CVE-2021-3851 Open Redirect in firefly-iii/firefly-iii

firefly-iii is vulnerable to URL Redirection to Untrusted Site...

CVE-2021-3851

CVE-2021-3851 affects firefly-iii (open-source personal finance app). Connected sources describe an Open Redirect vulnerability in the web application, enabling redirection to untrusted sites during a user flow (notably the bills/store flow where aReferer-based redirect can be manipulated to forw...