619 matches found
CVE-2021-3901
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3901
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
Cross site request forgery (csrf)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3901
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3901 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3901
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3901
CVE-2021-3901 affects firefly-iii: Cross-Site Request Forgery (CSRF) in the web application. The vulnerability arises from insufficient request validation, enabling an attacker to cause unintended actions on behalf of authenticated users. CVSS data in the initial document lists CVSS v3.1 base sco...
CVE-2021-3900
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
Cross site request forgery (csrf)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3900
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3900 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3900
CVE-2021-3900 affects firefly-iii and is described in connected sources as a Cross-Site Request Forgery (CSRF) vulnerability. The core issue is that a request could be forged by a logged-in user to perform unwanted actions. Some sources provide a specific exploit scenario: an attacker could, via ...
CVE-2021-3900
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
PT-2021-22353
Name of the Vulnerable Software and Affected Versions firefly-iii affected versions not specified Description The issue is related to Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. No information is provided...
firefly-iii 跨站请求伪造漏洞
firefly-iii is a free and open source personal finance software. firefly-iii suffers from a cross-site request forgery vulnerability, which originates when a WEB application does not sufficiently validate that a request is from a trusted user, and can be exploited by an attacker to send an...
firefly-iii 跨站请求伪造漏洞
firefly-iii is a free open source personal finance manager. firefly-iii suffers from a cross-site request forgery vulnerability. The vulnerability stems from the WEB application not adequately verifying that the request is from a trusted user. An attacker could exploit the vulnerability to send...
PT-2021-22356
Name of the Vulnerable Software and Affected Versions firefly-iii affected versions not specified Description The issue is related to Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. No information is provided...
CVE-2021-3901: Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3900: Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
in firefly-iii/firefly-iii
Description Firefly 3 allows users to register OAuth clients. However, Firefly allows duplicate client names to be registered into the application. Hence, attackers from a different account assuming registration is enabled can register a client with duplicate client name and trick the user into...