519 matches found
CVE-2024-22075
Firefly III aka firefly-iii before 6.1.1 allows webhooks HTML Injection...
Malicious code in firefly-utilities-helper-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7d1e40a9479f8d7f46dde5d530c7da4a5ac550607ec867806525a3bb749d6e76 The OpenSSF Package Analysis project identified 'firefly-utilities-helper-ts' @ 1.1.14 npm as malicious. It is considered malicious because: - T...
Malicious code in @marcomayo.com/firefly-shared-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a546d2e7e1826bee115fabca6b2802aab96ca9f227b6998e3ff64ca63459fc00 The OpenSSF Package Analysis project identified '@marcomayo.com/firefly-shared-js' @ 1.999.0 npm as malicious. It is considered malicious becaus...
Malicious code in firefly-shared-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 540259a2eb130bcb8b4596b7a6458b6290bd5dd6b8846751f0475931083f7594 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...
GHSA-H7VV-46P5-PRMH Firefly III insufficiently expires sessions
Firefly III prior to 6.0.0 insufficiently expires sessions upon close...
Firefly III insufficiently expires sessions
Firefly III prior to 6.0.0 insufficiently expires sessions upon close...
Session fixation
Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6...
firefly-iii 代码问题漏洞
firefly-iii is a free and open source personal finance manager. A code issue vulnerability exists in versions prior to firefly-iii 6, which stems from the presence of an insufficient session expiration time...
CVE-2023-1788 Insufficient Session Expiration in firefly-iii/firefly-iii
Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6...
CVE-2023-1788 Insufficient Session Expiration in firefly-iii/firefly-iii
Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6...
CVE-2023-1788 Insufficient Session Expiration in firefly-iii/firefly-iii
Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6...
CVE-2023-1788
CVE-2023-1788 affects Firefly III (firefly-iii/firefly-iii) prior to version 6.0.0, where sessions do not expire promptly after inactivity or on close. The issue is described as insufficient session expiration and is reflected in multiple sources (Red Hat advisory, GitHub advisory, GHSA, OSV, NVD...
PT-2023-17246 · Unknown · Firefly-Iii
Name of the Vulnerable Software and Affected Versions: Firefly III versions prior to 6.0.0 Description: The issue is related to insufficient session expiration in the Firefly III GitHub repository. This means that sessions are not properly closed after a certain period of inactivity or when a use...
Firefly III vulnerable to improper input validation
Firefly III versions prior to 6.0.0 are vulnerable to improper input validation...
GHSA-MWXW-HXVP-4R2R Firefly III vulnerable to improper input validation
Firefly III versions prior to 6.0.0 are vulnerable to improper input validation...
CVE-2023-1789
Improper Input Validation in GitHub repository firefly-iii/firefly-iii prior to 6.0.0...
Input validation
Improper Input Validation in GitHub repository firefly-iii/firefly-iii prior to 6.0.0...
PT-2023-17247 · Unknown · Firefly-Iii
Name of the Vulnerable Software and Affected Versions: firefly-iii/firefly-iii versions prior to 6.0.0 Description: The issue is related to improper input validation in the firefly-iii/firefly-iii GitHub repository. Recommendations: For versions prior to 6.0.0, update to version 6.0.0 or later to...
firefly-iii 输入验证错误漏洞
firefly-iii is a free and open source personal finance manager. An input validation error vulnerability exists in firefly-iii versions prior to 6.0.0 that stems from improper input validation...