Cross-Site Request Forgery in firefly-iii

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

GHSA-RQGP-CCPH-5W65 Cross-Site Request Forgery in firefly-iii

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3901

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3901

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

Cross site request forgery (csrf)

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3901

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3901 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3901

CVE-2021-3901 affects firefly-iii: Cross-Site Request Forgery (CSRF) in the web application. The vulnerability arises from insufficient request validation, enabling an attacker to cause unintended actions on behalf of authenticated users. CVSS data in the initial document lists CVSS v3.1 base sco...

CVE-2021-3900

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3900

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

Cross site request forgery (csrf)

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3900 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3900

CVE-2021-3900 affects firefly-iii and is described in connected sources as a Cross-Site Request Forgery (CSRF) vulnerability. The core issue is that a request could be forged by a logged-in user to perform unwanted actions. Some sources provide a specific exploit scenario: an attacker could, via ...

firefly-iii 跨站请求伪造漏洞

firefly-iii is a free and open source personal finance software. firefly-iii suffers from a cross-site request forgery vulnerability, which originates when a WEB application does not sufficiently validate that a request is from a trusted user, and can be exploited by an attacker to send an...

firefly-iii 跨站请求伪造漏洞

firefly-iii is a free open source personal finance manager. firefly-iii suffers from a cross-site request forgery vulnerability. The vulnerability stems from the WEB application not adequately verifying that the request is from a trusted user. An attacker could exploit the vulnerability to send...

in firefly-iii/firefly-iii

Description Firefly 3 allows users to register OAuth clients. However, Firefly allows duplicate client names to be registered into the application. Hence, attackers from a different account assuming registration is enabled can register a client with duplicate client name and trick the user into...

Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

Description there is a CSRF on Run rules again action Proof of Concept // PoC.html history.pushState'', '', '/'...

Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

Description No CSRF in duplicate rule, and modifying the order of the rule group Proof of Concept Click Me! Click Me! Click Me! Impact This vulnerability is capable of tricking admin users to duplicate rule and modifying order of rule groups Permalinks selected with reference to this report:...

firefly-iii code issue vulnerability

firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a code issue vulnerability that stems from the program being vulnerable to an unrestricted upload of dangerous types of files. No detailed vulnerability details are currently available...

firefly-iii open redirect vulnerability

firefly-iii is a free and open source personal finance manager. firefly-iii suffers from an open redirection vulnerability that stems from firefly-iii being susceptible to URL redirection to untrusted sites. No detailed vulnerability details are currently available...