Open Redirect in firefly-iii

firefly-iii is vulnerable to URL Redirection to Untrusted Site...

GHSA-5FVX-5P2R-4MVP Open Redirect in firefly-iii

firefly-iii is vulnerable to URL Redirection to Untrusted Site...

Unrestricted Upload

grumpydictator/firefly-iii allows an Unrestricted Upload of file. Lack of proper handling of temp file to be closed allows an attacker to attach and upload malicious files...

CVE-2021-3846

firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type...

CVE-2021-3851

firefly-iii is vulnerable to URL Redirection to Untrusted Site...

CVE-2021-3846

firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type...

CVE-2021-3851

firefly-iii is vulnerable to URL Redirection to Untrusted Site...

Unrestricted file upload

firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type...

CVE-2021-3851

firefly-iii is vulnerable to URL Redirection to Untrusted Site...

Design/Logic Flaw

firefly-iii is vulnerable to URL Redirection to Untrusted Site...

CVE-2021-3851

CVE-2021-3851 affects firefly-iii (open-source personal finance app). Connected sources describe an Open Redirect vulnerability in the web application, enabling redirection to untrusted sites during a user flow (notably the bills/store flow where aReferer-based redirect can be manipulated to forw...

CVE-2021-3851 Open Redirect in firefly-iii/firefly-iii

firefly-iii is vulnerable to URL Redirection to Untrusted Site...

CVE-2021-3846 Unrestricted Upload of File with Dangerous Type in firefly-iii/firefly-iii

firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type...

CVE-2021-3846

Firefly-III is reported vulnerable to Unrestricted Upload of File with Dangerous Type. The connected documents identify Firefly-III and an unrestricted upload issue but do not provide concrete technical details (vulnerable component/version, root cause, exploit specifics, or a fixed version) with...

firefly-iii 输入验证错误漏洞

firefly-iii is a free and open source personal finance manager. firefly-iii suffers from an open redirection vulnerability that stems from firefly-iii being susceptible to URL redirection to untrusted sites. No detailed vulnerability details are currently available...

firefly-iii 代码问题漏洞

firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a code issue vulnerability that stems from the program being vulnerable to an unrestricted upload of dangerous types of files. No detailed vulnerability details are currently available...

in firefly-iii/firefly-iii

Description file upload vulnerability in application Proof of Concept step to reproduce 1login to application 2 goto https://demo.firefly-iii.org/create-from-bill/1 3 upload file any kind of file application accept Reference PoC 1 https://i.ibb.co/9wWRnsf/Screenshot-12.png...

Cross-Site Request Forgery in firefly-iii

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF. This has been mitigated in version 5.6.1...

GHSA-356R-77Q8-F64F Cross-Site Request Forgery in firefly-iii

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF. This has been mitigated in version 5.6.1...

firefly-iii cross-site request forgery vulnerability (CNVD-2021-101212)

firefly-iii is a free open source personal finance manager. A cross-site request forgery vulnerability exists in firefly-iii, which can be exploited by an attacker to send unintended requests to the server...