Skip to contentFirefly-iii Firefly-iii vulnerabilities
- firefly-iiiFirefly III - Webhook URL Validation Explicitly Allows Loopback and Is Bypassable via DNS RebindingCVE-2026-712504.3 Medium
- firefly-iiiMFA bypass in oauth flow in Firefly IIICVE-2024-37893Fix available5.9 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreInsufficient Session Expiration in firefly-iii/firefly-iiiCVE-2023-1788Fix available5.4 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreImproper Input Validation in firefly-iii/firefly-iiiCVE-2023-1789Fix available5.2 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreIncorrect Authorization in firefly-iii/firefly-iiiCVE-2023-0298Fix available6.5 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiCVE-2021-4005Fix available4.3 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiCVE-2021-4015Fix available4.3 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiCVE-2021-3921Fix available5.4 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiCVE-2021-39013.5 Low
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiCVE-2021-39004.3 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreOpen Redirect in firefly-iii/firefly-iiiCVE-2021-3851Fix available5.0 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreUnrestricted Upload of File with Dangerous Type in firefly-iii/firefly-iiiCVE-2021-3846Fix available6.3 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiCVE-2021-3819Fix available4.3 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiCVE-2021-3730Fix available6.5 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiCVE-2021-3729Fix available4.3 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiCVE-2021-3728Fix available6.5 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreImproper Restriction of Excessive Authentication Attempts in firefly-iii/firefly-iiiCVE-2021-3663Fix available5.3 Medium