grumpydictator/firefly-iii vulnerabilities (Packagist)
26 vulnerabilities.
grumpydictator/firefly-iiiPackagistProject Firefly III has incorrect access control in the webhook management component9.1 Criticalgrumpydictator/firefly-iiiPackagistFirefly II has Stored XSS in Audit Log Entry view via piggy bank name (ale.twig)5.1 Mediumgrumpydictator/firefly-iiiPackagistFirefly III user API endpoints expose all users' information to any authenticated user (IDOR)5.7 Mediumgrumpydictator/firefly-iiiPackagistMFA bypass in oauth flow in Firefly III5.9 Mediumgrumpydictator/firefly-iiiPackagistC5 Firefly III CSV Injection.4.0 Mediumgrumpydictator/firefly-iiiPackagistFirefly III allows webhooks HTML Injection.6.1 Mediumgrumpydictator/firefly-iiiPackagistInsufficient Session Expiration in firefly-iii/firefly-iii5.4 Mediumgrumpydictator/firefly-iiiPackagistImproper Input Validation in firefly-iii/firefly-iii5.2 Mediumgrumpydictator/firefly-iiiPackagistIncorrect Authorization in firefly-iii/firefly-iii6.5 Mediumgrumpydictator/firefly-iiiPackagistCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii4.3 Mediumgrumpydictator/firefly-iiiPackagistCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii4.3 Mediumgrumpydictator/firefly-iiiPackagistCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii5.4 Mediumgrumpydictator/firefly-iiiPackagistCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii3.5 Lowgrumpydictator/firefly-iiiPackagistCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii4.3 Mediumgrumpydictator/firefly-iiiPackagistOpen Redirect in firefly-iii/firefly-iii5.0 Mediumgrumpydictator/firefly-iiiPackagistUnrestricted Upload of File with Dangerous Type in firefly-iii/firefly-iii6.3 Mediumgrumpydictator/firefly-iiiPackagistCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii4.3 Mediumgrumpydictator/firefly-iiiPackagistCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii6.5 Mediumgrumpydictator/firefly-iiiPackagistCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii4.3 Mediumgrumpydictator/firefly-iiiPackagistCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii6.5 Mediumgrumpydictator/firefly-iiiPackagistImproper Restriction of Excessive Authentication Attempts in firefly-iii/firefly-iii5.3 Mediumgrumpydictator/firefly-iiiPackagistImproper Input Validation in Firefly III3.3 Lowgrumpydictator/firefly-iiiPackagistFirefly III vulnerable to image-based stored XSS5.4 Mediumgrumpydictator/firefly-iiiPackagistFirefly III vulnerable to reflected cross-site scripting5.4 Mediumgrumpydictator/firefly-iiiPackagistFirefly III vulnerable to stored XSS5.4 Mediumgrumpydictator/firefly-iiiPackagistFirefly III vulnerable to stored XSS5.4 Medium