519 matches found
CVE-2021-4015
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
Cross site request forgery (csrf)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4015 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4015
CVE-2021-4015 affects the Firefly-III application and is a Cross-Site Request Forgery (CSRF) vulnerability. Multiple connected sources corroborate CSRF as the issue, with details pointing to an exploit path such as "/transactions/link/switch/id" (CNNVD summary). The CVE entry includes a CVSS v3.1...
firefly-iii 跨站请求伪造漏洞
firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a cross-site request forgery vulnerability, which can be exploited by attackers via /transactions/link/switch/id...
Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
Description CSRF in switching transactions link Proof of Concept CLICK ME! Impact This vulnerability is capable of tricking users to switch transaction links...
Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
Description CSRF to disable 2FA Proof of Concept CLICK ME! Impact This vulnerability is capable of tricking users to disable 2FA...
firefly-iii cross-site request forgery vulnerability
firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a cross-site request forgery vulnerability, which can be exploited by attackers to launch cross-site request forgery CSRF attacks...
GHSA-Q2CV-94XM-QVG4 firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3921
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3921
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3921
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
Cross site request forgery (csrf)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3921 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3921
CVE-2021-3921 affects firefly-iii. Multiple sources document a Cross-Site Request Forgery (CSRF) vulnerability in firefly-iii that can cause a logged-in user to be logged out via a forged request example (via a GET/ANY login-logout flow). The Huntr entry specifically describes an attacker logging...
firefly-iii 跨站请求伪造漏洞
firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a cross-site request forgery vulnerability, which can be exploited by attackers to launch cross-site request forgery CSRF attacks...
firefly-iii Cross-site Request Forgery Vulnerability (CNVD-2022-19846)
firefly-iii is a free and open source personal finance software. firefly-iii suffers from a cross-site request forgery vulnerability, which originates when a WEB application does not sufficiently validate that a request is from a trusted user, and can be exploited by an attacker to send an...