Skip to contentFirefly-iii Firefly Iii vulnerabilities
- firefly-iii firefly iiiFirefly III allows webhooks HTML Injection.CVE-2024-22075Fix available6.1 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreInsufficient Session Expiration in firefly-iii/firefly-iiiCVE-2023-1788Fix available5.4 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreImproper Input Validation in firefly-iii/firefly-iiiCVE-2023-1789Fix available5.2 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreIncorrect Authorization in firefly-iii/firefly-iiiCVE-2023-0298Fix available6.5 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiCVE-2021-4005Fix available4.3 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiCVE-2021-4015Fix available4.3 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiCVE-2021-3921Fix available5.4 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiCVE-2021-39013.5 Low
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiCVE-2021-39004.3 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreOpen Redirect in firefly-iii/firefly-iiiCVE-2021-3851Fix available5.0 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreUnrestricted Upload of File with Dangerous Type in firefly-iii/firefly-iiiCVE-2021-3846Fix available6.3 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiCVE-2021-3819Fix available4.3 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiCVE-2021-3730Fix available6.5 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiCVE-2021-3729Fix available4.3 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiCVE-2021-3728Fix available6.5 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreImproper Restriction of Excessive Authentication Attempts in firefly-iii/firefly-iiiCVE-2021-3663Fix available5.3 Medium
- firefly-iii firefly iiiFirefly III 4.7.17.4 is vulnerable to multiple stored XSS issues due to the lack of filtration of...CVE-2019-146676.1 Medium
- firefly-iii firefly iiiFirefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied...CVE-2019-146685.4 Medium
- firefly-iii firefly iiiFirefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied...CVE-2019-146695.4 Medium
- firefly-iii firefly iiiFirefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied...CVE-2019-146705.4 Medium
- firefly-iii firefly iiiImproper Input Validation in Firefly IIICVE-2019-14671Fix available3.3 Low
- firefly-iii firefly iiiFirefly III 4.7.17.5 is vulnerable to stored XSS due to the lack of filtration of user-supplied...CVE-2019-146725.4 Medium
- firefly-iii firefly iiiFirefly III vulnerable to image-based stored XSSCVE-2019-13647Fix availableDisputed5.4 Medium
- firefly-iii firefly iiiFirefly III vulnerable to reflected cross-site scriptingCVE-2019-13646Fix availableDisputed5.4 Medium
- firefly-iii firefly iiiFirefly III vulnerable to stored XSSCVE-2019-13645Fix availableDisputed5.4 Medium
- firefly-iii firefly iiiFirefly III vulnerable to stored XSSCVE-2019-13644Fix availableDisputed5.4 Medium