Firefly-iii vulnerabilities

Products

• Firefly Iii 26
• Firefly-iii/firefly-iii 15
• Firefly-iii 2

Newest

• firefly-iii Firefly III - Webhook URL Validation Explicitly Allows Loopback and Is Bypassable via DNS Rebinding CVE-2026-71250 4.3 MediumAugust 5, 2026
• firefly-iii MFA bypass in oauth flow in Firefly III CVE-2024-37893 Fix available 5.9 MediumJune 17, 2024
• firefly-iii firefly iii Firefly III allows webhooks HTML Injection. CVE-2024-22075 Fix available 6.1 MediumJanuary 5, 2024
• firefly-iii firefly-iii/firefly-iii, firefly iii +1 more Insufficient Session Expiration in firefly-iii/firefly-iii CVE-2023-1788 Fix available 5.4 MediumApril 5, 2023
• firefly-iii firefly-iii/firefly-iii, firefly iii +1 more Improper Input Validation in firefly-iii/firefly-iii CVE-2023-1789 Fix available 5.2 MediumApril 1, 2023
• firefly-iii firefly-iii/firefly-iii, firefly iii +1 more Incorrect Authorization in firefly-iii/firefly-iii CVE-2023-0298 Fix available 6.5 MediumJanuary 14, 2023
• firefly-iii firefly-iii/firefly-iii, firefly iii +1 more Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii CVE-2021-4005 Fix available 4.3 MediumDecember 4, 2021
• firefly-iii firefly-iii/firefly-iii, firefly iii +1 more Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii CVE-2021-4015 Fix available 4.3 MediumDecember 1, 2021
• firefly-iii firefly-iii/firefly-iii, firefly iii +1 more Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii CVE-2021-3921 Fix available 5.4 MediumNovember 13, 2021
• firefly-iii firefly-iii/firefly-iii, firefly iii +1 more Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii CVE-2021-3901 3.5 LowOctober 27, 2021
• firefly-iii firefly-iii/firefly-iii, firefly iii +1 more Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii CVE-2021-3900 4.3 MediumOctober 27, 2021
• firefly-iii firefly-iii/firefly-iii, firefly iii +1 more Open Redirect in firefly-iii/firefly-iii CVE-2021-3851 Fix available 5.0 MediumOctober 19, 2021
• firefly-iii firefly-iii/firefly-iii, firefly iii +1 more Unrestricted Upload of File with Dangerous Type in firefly-iii/firefly-iii CVE-2021-3846 Fix available 6.3 MediumOctober 19, 2021
• firefly-iii firefly-iii/firefly-iii, firefly iii +1 more Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii CVE-2021-3819 Fix available 4.3 MediumSeptember 27, 2021
• firefly-iii firefly-iii/firefly-iii, firefly iii +1 more Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii CVE-2021-3730 Fix available 6.5 MediumAugust 23, 2021
• firefly-iii firefly-iii/firefly-iii, firefly iii +1 more Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii CVE-2021-3729 Fix available 4.3 MediumAugust 23, 2021
• firefly-iii firefly-iii/firefly-iii, firefly iii +1 more Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii CVE-2021-3728 Fix available 6.5 MediumAugust 23, 2021
• firefly-iii firefly-iii/firefly-iii, firefly iii +1 more Improper Restriction of Excessive Authentication Attempts in firefly-iii/firefly-iii CVE-2021-3663 Fix available 5.3 MediumJuly 25, 2021
• firefly-iii firefly iii Firefly III 4.7.17.4 is vulnerable to multiple stored XSS issues due to the lack of filtration of... CVE-2019-14667 6.1 MediumAugust 5, 2019
• firefly-iii firefly iii Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied... CVE-2019-14668 5.4 MediumAugust 5, 2019
• firefly-iii firefly iii Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied... CVE-2019-14669 5.4 MediumAugust 5, 2019
• firefly-iii firefly iii Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied... CVE-2019-14670 5.4 MediumAugust 5, 2019
• firefly-iii firefly iii Improper Input Validation in Firefly III CVE-2019-14671 Fix available 3.3 LowAugust 5, 2019
• firefly-iii firefly iii Firefly III 4.7.17.5 is vulnerable to stored XSS due to the lack of filtration of user-supplied... CVE-2019-14672 5.4 MediumAugust 5, 2019
• firefly-iii firefly iii Firefly III vulnerable to image-based stored XSS CVE-2019-13647 Fix availableDisputed 5.4 MediumJuly 18, 2019
• firefly-iii firefly iii Firefly III vulnerable to reflected cross-site scripting CVE-2019-13646 Fix availableDisputed 5.4 MediumJuly 18, 2019
• firefly-iii firefly iii Firefly III vulnerable to stored XSS CVE-2019-13645 Fix availableDisputed 5.4 MediumJuly 18, 2019
• firefly-iii firefly iii Firefly III vulnerable to stored XSS CVE-2019-13644 Fix availableDisputed 5.4 MediumJuly 18, 2019