Lucene search
+L

619 matches found

Huntr
Huntr
•added 2021/11/23 12:59 p.m.•23 views

Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

Description CSRF in switching transactions link Proof of Concept CLICK ME! Impact This vulnerability is capable of tricking users to switch transaction links...

4.3CVSS1.4AI score0.00443EPSS
SaveExploits1References1
Huntr
Huntr
•added 2021/11/23 9:11 a.m.•23 views

Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

Description CSRF to disable 2FA Proof of Concept CLICK ME! Impact This vulnerability is capable of tricking users to disable 2FA...

4.3CVSS0.9AI score0.00443EPSS
SaveExploits1
CNVD
CNVD
•added 2021/11/16 12:00 a.m.•56 views

firefly-iii cross-site request forgery vulnerability

firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a cross-site request forgery vulnerability, which can be exploited by attackers to launch cross-site request forgery CSRF attacks...

5.4CVSS4.3AI score0.00443EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2021/11/15 11:18 p.m.•42 views

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

5.4CVSS5.1AI score0.00443EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2021/11/15 11:18 p.m.•32 views

GHSA-Q2CV-94XM-QVG4 firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

5.4CVSS4.4AI score0.00443EPSS
SaveExploits1References4
NVD
NVD
•added 2021/11/13 9:15 a.m.•41 views

CVE-2021-3921

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

5.4CVSS0.00443EPSS
SaveExploits1References2
OSV
OSV
•added 2021/11/13 9:15 a.m.•21 views

CVE-2021-3921

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

4.3CVSS6.9AI score
SaveExploits0References2
attackerkb
attackerkb
•added 2021/11/13 9:15 a.m.•11 views

CVE-2021-3921

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

5.4CVSS6AI score0.00443EPSS
SaveExploits1References3
Prion
Prion
•added 2021/11/13 9:15 a.m.•20 views

Cross site request forgery (csrf)

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

4.3CVSS4.6AI score0.00443EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/11/13 8:55 a.m.•30 views

CVE-2021-3921 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

5.4CVSS5AI score0.00443EPSS
SaveExploits1References2
CVE
CVE
•added 2021/11/13 8:55 a.m.•88 views

CVE-2021-3921

CVE-2021-3921 affects firefly-iii. Multiple sources document a Cross-Site Request Forgery (CSRF) vulnerability in firefly-iii that can cause a logged-in user to be logged out via a forged request example (via a GET/ANY login-logout flow). The Huntr entry specifically describes an attacker logging...

5.4CVSS5.7AI score0.00443EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2021/11/13 8:55 a.m.•2 views

CVE-2021-3921

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

5.4CVSS0.00443EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/13 12:00 a.m.•2 views

CVE-2021-3921: Cross-Site Request Forgery (CSRF)

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

5.4CVSS5.8AI score0.00443EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/11/13 12:00 a.m.•17 views

firefly-iii 跨站请求伪造漏洞

firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a cross-site request forgery vulnerability, which can be exploited by attackers to launch cross-site request forgery CSRF attacks...

5.4CVSS5.4AI score0.00443EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/11/13 12:00 a.m.•4 views

PT-2021-22462

Name of the Vulnerable Software and Affected Versions firefly-iii affected versions not specified Description The issue is related to Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. No information is provided...

5.4CVSS0.00443EPSS
SaveExploits1References8
CNVD
CNVD
•added 2021/10/31 12:00 a.m.•71 views

firefly-iii Cross-site Request Forgery Vulnerability (CNVD-2022-19846)

firefly-iii is a free and open source personal finance software. firefly-iii suffers from a cross-site request forgery vulnerability, which originates when a WEB application does not sufficiently validate that a request is from a trusted user, and can be exploited by an attacker to send an...

8.8CVSS3.9AI score0.00554EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2021/10/28 11:14 p.m.•56 views

Cross-Site Request Forgery in firefly-iii

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

6.5CVSS6.3AI score0.00551EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2021/10/28 11:14 p.m.•28 views

GHSA-PFJ7-W373-GQCH Cross-Site Request Forgery in firefly-iii

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

6.5CVSS6.4AI score0.00551EPSS
SaveExploits1References4
OSV
OSV
•added 2021/10/28 11:14 p.m.•34 views

GHSA-RQGP-CCPH-5W65 Cross-Site Request Forgery in firefly-iii

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

3.5CVSS8.6AI score0.00554EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2021/10/28 11:14 p.m.•52 views

Cross-Site Request Forgery in firefly-iii

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

8.8CVSS8.4AI score0.00554EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder