Lucene search
+L

689 matches found

OSV
OSV
•added 2021/12/01 11:15 a.m.•15 views

CVE-2021-4015

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

4.3CVSS6.9AI score
SaveExploits0References2
attackerkb
attackerkb
•added 2021/12/01 11:15 a.m.•10 views

CVE-2021-4015

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

4.3CVSS5.4AI score0.00443EPSS
SaveExploits1References3
Prion
Prion
•added 2021/12/01 11:15 a.m.•19 views

Cross site request forgery (csrf)

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

4.3CVSS4.7AI score0.00443EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2021/12/01 10:20 a.m.•79 views

CVE-2021-4015

CVE-2021-4015 affects the Firefly-III application and is a Cross-Site Request Forgery (CSRF) vulnerability. Multiple connected sources corroborate CSRF as the issue, with details pointing to an exploit path such as "/transactions/link/switch/id" (CNNVD summary). The CVE entry includes a CVSS v3.1...

4.3CVSS4.5AI score0.00443EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/12/01 10:20 a.m.•33 views

CVE-2021-4015 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

4.3CVSS5AI score0.00443EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/12/01 12:00 a.m.•13 views

firefly-iii 跨站请求伪造漏洞

firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a cross-site request forgery vulnerability, which can be exploited by attackers via /transactions/link/switch/id...

4.3CVSS4.9AI score0.00443EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/01 12:00 a.m.•4 views

CVE-2021-4015: Cross-Site Request Forgery (CSRF)

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

4.3CVSS5.8AI score0.00443EPSS
SaveExploits1References2
Huntr
Huntr
•added 2021/11/23 12:59 p.m.•23 views

Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

Description CSRF in switching transactions link Proof of Concept CLICK ME! Impact This vulnerability is capable of tricking users to switch transaction links...

4.3CVSS1.4AI score0.00443EPSS
SaveExploits1References1
Huntr
Huntr
•added 2021/11/23 9:11 a.m.•21 views

Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

Description CSRF to disable 2FA Proof of Concept CLICK ME! Impact This vulnerability is capable of tricking users to disable 2FA...

4.3CVSS0.9AI score0.00443EPSS
SaveExploits1
CNVD
CNVD
•added 2021/11/16 12:00 a.m.•54 views

firefly-iii cross-site request forgery vulnerability

firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a cross-site request forgery vulnerability, which can be exploited by attackers to launch cross-site request forgery CSRF attacks...

5.4CVSS4.3AI score0.00443EPSS
SaveExploits1References1
OSV
OSV
•added 2021/11/15 11:18 p.m.•30 views

GHSA-Q2CV-94XM-QVG4 firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

5.4CVSS4.4AI score0.00443EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2021/11/15 11:18 p.m.•40 views

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

5.4CVSS5.1AI score0.00443EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2021/11/13 9:15 a.m.•20 views

CVE-2021-3921

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

4.3CVSS6.9AI score
SaveExploits0References2
NVD
NVD
•added 2021/11/13 9:15 a.m.•38 views

CVE-2021-3921

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

5.4CVSS0.00443EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/11/13 9:15 a.m.•11 views

CVE-2021-3921

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

5.4CVSS6AI score0.00443EPSS
SaveExploits1References3
Prion
Prion
•added 2021/11/13 9:15 a.m.•19 views

Cross site request forgery (csrf)

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

4.3CVSS4.6AI score0.00443EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/11/13 8:55 a.m.•29 views

CVE-2021-3921 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

5.4CVSS5AI score0.00443EPSS
SaveExploits1References2
CVE
CVE
•added 2021/11/13 8:55 a.m.•86 views

CVE-2021-3921

CVE-2021-3921 affects firefly-iii. Multiple sources document a Cross-Site Request Forgery (CSRF) vulnerability in firefly-iii that can cause a logged-in user to be logged out via a forged request example (via a GET/ANY login-logout flow). The Huntr entry specifically describes an attacker logging...

5.4CVSS4.7AI score0.00443EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/13 12:00 a.m.•1 views

CVE-2021-3921: Cross-Site Request Forgery (CSRF)

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

5.4CVSS5.8AI score0.00443EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/11/13 12:00 a.m.•15 views

firefly-iii 跨站请求伪造漏洞

firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a cross-site request forgery vulnerability, which can be exploited by attackers to launch cross-site request forgery CSRF attacks...

5.4CVSS5.4AI score0.00443EPSS
SaveExploits1References3
Rows per page
Query Builder