CVE-2021-4005

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

Cross site request forgery (csrf)

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-4005 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-4005

CVE-2021-4005 affects the Firefly-III project and is a Cross-Site Request Forgery (CSRF) vulnerability. Multiple connected records (OSV, GHSA, Red Hat, CNVD, CNVD-CNVD, CNVD-202112-206) describe firefly-iii as vulnerable to CSRF; OSV notes that the CSRF could disable two-factor authentication for...

CVE-2021-4005

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

firefly-iii 跨站请求伪造漏洞

firefly-iii is a free open source personal finance manager. A cross-site request forgery vulnerability exists in firefly-ii, which can be exploited by attackers to launch cross-site request forgery CSRF attacks...

PT-2021-22789

Name of the Vulnerable Software and Affected Versions firefly-iii affected versions not specified Description The issue is related to Cross-Site Request Forgery CSRF, which can be exploited to disable two-factor authentication for a target user. This allows an attacker to bypass the additional...

CVE-2021-4005: Cross-Site Request Forgery (CSRF)

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

Cross-site Request Forgery (CSRF)

grumpydictator/firefly-iii is vulnerable to cross-site request forgery. The vulnerability is capable of tricking users to switch transaction links and unknowingly perform unwanted actions on malicious websites...

CVE-2021-4015

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-4015

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-4015

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

Cross site request forgery (csrf)

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-4015 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-4015

CVE-2021-4015 affects the Firefly-III application and is a Cross-Site Request Forgery (CSRF) vulnerability. Multiple connected sources corroborate CSRF as the issue, with details pointing to an exploit path such as "/transactions/link/switch/id" (CNNVD summary). The CVE entry includes a CVSS v3.1...

CVE-2021-4015

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

firefly-iii 跨站请求伪造漏洞

firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a cross-site request forgery vulnerability, which can be exploited by attackers via /transactions/link/switch/id...

PT-2021-22821

Name of the Vulnerable Software and Affected Versions firefly-iii affected versions not specified Description The issue is related to Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. No information is provided...

CVE-2021-4015: Cross-Site Request Forgery (CSRF)

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

Description CSRF in switching transactions link Proof of Concept CLICK ME! Impact This vulnerability is capable of tricking users to switch transaction links...