firefly-iii firefly iii - vulnerabilities and exploits

(subscribe to this query)

NA

Improper Input Validation in GitHub repository firefly-iii/firefly-iii before 6.0.0.

Firefly-iii Firefly Iii 6.0.0 Firefly-iii Firefly Iii 5.8.0 Firefly-iii Firefly Iii

NA

Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii before 6.

Firefly-iii Firefly Iii Firefly-iii Firefly Iii 6.0.0

4.3

CVSSv2

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

Firefly-iii Firefly Iii

4.3

CVSSv2

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

Firefly-iii Firefly Iii -

4.3

CVSSv2

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

Firefly-iii Firefly Iii -

3.5

CVSSv2

Firefly III prior to 4.7.17.3 is vulnerable to stored XSS due to lack of filtration of user-supplied data in image file names. The JavaScript code is executed during attachments/edit/$file_id$ attachment editing. NOTE: It is asserted that an attacker must have the same access rig...

Firefly-iii Firefly Iii

3.5

CVSSv2

Firefly III prior to 4.7.17.3 is vulnerable to reflected XSS due to lack of filtration of user-supplied data in a search query. NOTE: It is asserted that an attacker must have the same access rights as the user in order to be able to execute the vulnerability

Firefly-iii Firefly Iii

3.5

CVSSv2

Firefly III prior to 4.7.17.3 is vulnerable to stored XSS due to lack of filtration of user-supplied data in image file content. The JavaScript code is executed during attachments/view/$file_id$ attachment viewing. NOTE: It is asserted that an attacker must have the same access r...

Firefly-iii Firefly Iii

6.8

CVSSv2

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

Firefly-iii Firefly Iii

4.3

CVSSv2

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

Firefly-iii Firefly Iii

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook