PT-2024-27815

Name of the Vulnerable Software and Affected Versions Firefly III versions prior to 6.1.17 Description An MFA bypass exists in the OAuth flow of Firefly III, which allows malicious users to circumvent the multi-factor authentication check. This flaw enables attackers to use password spraying—a...

Firefly-III Cross-Site Request Forgery Vulnerability

firefly-iii is a free open source personal finance manager. A cross-site request forgery vulnerability exists in firefly-ii, which can be exploited by attackers to launch cross-site request forgery CSRF attacks...

CVE-2021-3900

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...