firefly-iii vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

Improper Input Validation in GitHub repository firefly-iii/firefly-iii before 6.0.0.

Firefly-iii Firefly Iii 6.0.0 Firefly-iii Firefly Iii 5.8.0 Firefly-iii Firefly Iii

9.8

CVSSv3

Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii before 6.

Firefly-iii Firefly Iii Firefly-iii Firefly Iii 6.0.0

6.1

CVSSv3

Firefly III (aka firefly-iii) prior to 6.1.1 allows webhooks HTML Injection.

Firefly-iii Firefly Iii

6.5

CVSSv3

Incorrect Authorization in GitHub repository firefly-iii/firefly-iii before 5.8.0.

Firefly-iii Firefly Iii

8.8

CVSSv3

firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type

Firefly-iii Firefly Iii

6.5

CVSSv3

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

Firefly-iii Firefly Iii

5.4

CVSSv3

Firefly III prior to 4.7.17.3 is vulnerable to reflected XSS due to lack of filtration of user-supplied data in a search query. NOTE: It is asserted that an attacker must have the same access rights as the user in order to be able to execute the vulnerability

Firefly-iii Firefly Iii

7.5

CVSSv3

firefly-iii is vulnerable to Improper Restriction of Excessive Authentication Attempts

Firefly-iii Firefly Iii

5.4

CVSSv3

Firefly III prior to 4.7.17.1 is vulnerable to stored XSS due to lack of filtration of user-supplied data in a budget name. The JavaScript code is contained in a transaction, and is executed on the tags/show/$tag_number$ tag summary page. NOTE: It is asserted that an attacker mus...

Firefly-iii Firefly Iii

5.4

CVSSv3

Firefly III prior to 4.7.17.3 is vulnerable to stored XSS due to lack of filtration of user-supplied data in image file content. The JavaScript code is executed during attachments/view/$file_id$ attachment viewing. NOTE: It is asserted that an attacker must have the same access r...

Firefly-iii Firefly Iii

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook