CVE-2023-1789 Improper Input Validation in firefly-iii/firefly-iii

Improper Input Validation in GitHub repository firefly-iii/firefly-iii prior to 6.0.0...

CVE-2023-1789

CVE-2023-1789 affects firefly-iii/firefly-iii prior to 6.0.0. The root cause is improper input validation in the GitHub repository, leading to potential manipulation or disclosure paths. Public sources assign a high-severity impact (NVD CVSS 3.1 base score 9.8: Critical for confidentiality, integ...

CVE-2023-1789 Improper Input Validation in firefly-iii/firefly-iii

Improper Input Validation in GitHub repository firefly-iii/firefly-iii prior to 6.0.0...

SUSE CVE-2007-5825

Format string vulnerability in the wsaddarg function in webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to execute arbitrary code via a stats method action to /xml-rpc with format string specifiers in the 1 username or 2 password portion of base64-encoded...

SUSE CVE-2007-5824

webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service NULL dereference and daemon crash via a stats method action to /xml-rpc with 1 an empty Authorization header line, which triggers a crash in the wsdecodepassword function; or 2 a...

SUSE CVE-2008-1771

Integer overflow in the wsgetpostvars function in Firefly Media Server formerly mt-daapd 0.2.4.1 0.9r1696-1.2 on Debian allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an HTTP POST request with a large Content-Length...

Improper Authorization in grumpydictator/firefly-iii

Improper Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0...

GHSA-7MC4-JP4F-V2J2 Improper Authorization in grumpydictator/firefly-iii

Improper Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0...

CVE-2023-0298

Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0...

Authorization

Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0...

CVE-2023-0298 Incorrect Authorization in firefly-iii/firefly-iii

Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0...

PT-2023-16153

Name of the Vulnerable Software and Affected Versions firefly-iii versions prior to 5.8.0 Description The issue concerns an improper authorization in the firefly-iii repository on GitHub. Recommendations For versions prior to 5.8.0, update to version 5.8.0 or later to resolve the issue...

CVE-2023-0298 Incorrect Authorization in firefly-iii/firefly-iii

Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0...

firefly-iii 授权问题漏洞

firefly-iii is a free and open source personal finance manager. A vulnerability with authorization issues exists in versions of firefly-iii prior to 5.8.0, which stems from its API failing to properly check authorization...

CVE-2023-0298

CVE-2023-0298 affects the Firefly III project in the GitHub repository firefly-iii/firefly-iii, with an vulnerability described as “Incorrect Authorization” in versions prior to 5.8.0. The connected documents consistently identify this as an authorization issue in the API path and confirm the aff...

CVE-2023-0298 Incorrect Authorization in firefly-iii/firefly-iii

Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0...

GHSA-5GQ7-826W-8282 Unrestricted File Upload vulnerability in Firefly III

firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type...

Unrestricted File Upload vulnerability in Firefly III

firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type...

GHSA-5HPW-VCJ2-PRWG Firefly III vulnerable to stored XSS

Firefly III before 4.7.17.3 is vulnerable to stored XSS due to lack of filtration of user-supplied data in image file names. The JavaScript code is executed during attachments/edit/$fileid$ attachment editing...

GHSA-PCXQ-28F6-M3FM Firefly III vulnerable to image-based stored XSS

Firefly III before 4.7.17.3 is vulnerable to stored XSS due to lack of filtration of user-supplied data in image file content. The JavaScript code is executed during attachments/view/$fileid$ attachment viewing...