619 matches found
PT-2023-16153
Name of the Vulnerable Software and Affected Versions firefly-iii versions prior to 5.8.0 Description The issue concerns an improper authorization in the firefly-iii repository on GitHub. Recommendations For versions prior to 5.8.0, update to version 5.8.0 or later to resolve the issue...
CVE-2023-0298 Incorrect Authorization in firefly-iii/firefly-iii
Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0...
CVE-2023-0298
Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0...
CVE-2023-0298: Incorrect Authorization
Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0...
CVE-2023-0298
CVE-2023-0298 affects the Firefly III project in the GitHub repository firefly-iii/firefly-iii, with an vulnerability described as “Incorrect Authorization” in versions prior to 5.8.0. The connected documents consistently identify this as an authorization issue in the API path and confirm the aff...
GHSA-5GQ7-826W-8282 Unrestricted File Upload vulnerability in Firefly III
firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type...
Unrestricted File Upload vulnerability in Firefly III
firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type...
GHSA-PCXQ-28F6-M3FM Firefly III vulnerable to image-based stored XSS
Firefly III before 4.7.17.3 is vulnerable to stored XSS due to lack of filtration of user-supplied data in image file content. The JavaScript code is executed during attachments/view/$fileid$ attachment viewing...
Firefly III vulnerable to reflected cross-site scripting
Firefly III before 4.7.17.3 is vulnerable to reflected XSS due to lack of filtration of user-supplied data in a search query...
Firefly III vulnerable to image-based stored XSS
Firefly III before 4.7.17.3 is vulnerable to stored XSS due to lack of filtration of user-supplied data in image file content. The JavaScript code is executed during attachments/view/$fileid$ attachment viewing...
Firefly III vulnerable to stored XSS
Firefly III before 4.7.17.3 is vulnerable to stored XSS due to lack of filtration of user-supplied data in image file names. The JavaScript code is executed during attachments/edit/$fileid$ attachment editing...
GHSA-MRC2-H7Q2-PP97 Firefly III vulnerable to reflected cross-site scripting
Firefly III before 4.7.17.3 is vulnerable to reflected XSS due to lack of filtration of user-supplied data in a search query...
GHSA-5HPW-VCJ2-PRWG Firefly III vulnerable to stored XSS
Firefly III before 4.7.17.3 is vulnerable to stored XSS due to lack of filtration of user-supplied data in image file names. The JavaScript code is executed during attachments/edit/$fileid$ attachment editing...
GHSA-9XMX-RJ7J-FV9Q Firefly III vulnerable to stored XSS
Firefly III before 4.7.17.1 is vulnerable to stored XSS due to lack of filtration of user-supplied data in a budget name. The JavaScript code is contained in a transaction, and is executed on the tags/show/$tagnumber$ tag summary page. NOTE: It is asserted that an attacker must have the same acce...
Firefly III vulnerable to stored XSS
Firefly III before 4.7.17.1 is vulnerable to stored XSS due to lack of filtration of user-supplied data in a budget name. The JavaScript code is contained in a transaction, and is executed on the tags/show/$tagnumber$ tag summary page. NOTE: It is asserted that an attacker must have the same acce...
Cross Site Request Forgery in firefly-iii
firefly-iii is vulnerable to a Cross-Site Request Forgery CSRF attack which can disable two factor authentication for the target user...
firefly-iii Cross-Site Request Forgery Vulnerability
firefly-iii is a free open source personal finance manager. A cross-site request forgery vulnerability exists in firefly-ii, which can be exploited by attackers to launch cross-site request forgery CSRF attacks...
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
