618 matches found
firefly-iii 输入验证错误漏洞
firefly-iii is a free and open source personal finance manager. firefly-iii suffers from an open redirection vulnerability that stems from firefly-iii being susceptible to URL redirection to untrusted sites. No detailed vulnerability details are currently available...
firefly-iii 代码问题漏洞
firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a code issue vulnerability that stems from the program being vulnerable to an unrestricted upload of dangerous types of files. No detailed vulnerability details are currently available...
PT-2021-22134
Name of the Vulnerable Software and Affected Versions firefly-iii affected versions not specified Description The issue concerns an unrestricted upload of files with dangerous types. Recommendations At the moment, there is no information about a newer version that contains a fix for this...
PT-2021-22167
Name of the Vulnerable Software and Affected Versions firefly-iii affected versions not specified Description The issue concerns URL Redirection to Untrusted Site. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...
CVE-2021-3851: URL Redirection to Untrusted Site
firefly-iii is vulnerable to URL Redirection to Untrusted Site...
CVE-2021-3846: Unrestricted Upload of File with Dangerous Type
firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type...
in firefly-iii/firefly-iii
Description file upload vulnerability in application Proof of Concept step to reproduce 1login to application 2 goto https://demo.firefly-iii.org/create-from-bill/1 3 upload file any kind of file application accept Reference PoC 1 https://i.ibb.co/9wWRnsf/Screenshot-12.png...
GHSA-356R-77Q8-F64F Cross-Site Request Forgery in firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF. This has been mitigated in version 5.6.1...
Cross-Site Request Forgery in firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF. This has been mitigated in version 5.6.1...
firefly-iii cross-site request forgery vulnerability (CNVD-2021-101212)
firefly-iii is a free open source personal finance manager. A cross-site request forgery vulnerability exists in firefly-iii, which can be exploited by an attacker to send unintended requests to the server...
CVE-2021-3819
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3819
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
Cross site request forgery (csrf)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3819
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3819 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3819
CVE-2021-3819 is a Cross-Site Request Forgery (CSRF) vulnerability affecting firefly-iii. The NVD/OSV entries indicate high impact (CVSSv3.1 base score 8.8) with network access, no authentication, and user interaction required, enabling unauthorized requests to the server. The issue is acknowledg...
CVE-2021-3819
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
firefly-iii 跨站请求伪造漏洞
firefly-iii is a free open source personal finance manager. A cross-site request forgery vulnerability exists in firefly-iii, which can be exploited by an attacker to send unintended requests to the server...
PT-2021-21997
Name of the Vulnerable Software and Affected Versions: firefly-iii versions prior to 5.6.1 Description: The issue is related to Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. No information is provided about t...