CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1CVE-2021-3851 – Open Redirect in firefly-iii/firefly-iii
https://notcve.org/view.php?id=CVE-2021-3851
firefly-iii is vulnerable to URL Redirection to Untrusted Site firefly-iii es vulnerable a una Redirección de URLs a Sitios no Confiables • https://github.com/firefly-iii/firefly-iii/commit/8662dfa4c0f71efef61c31dc015c6f723db8318d https://huntr.dev/bounties/549a1040-9b5e-420b-9b80-20700dd9d592 • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2021-3846 – Unrestricted Upload of File with Dangerous Type in firefly-iii/firefly-iii
https://notcve.org/view.php?id=CVE-2021-3846
firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type firefly-iii es vulnerable a una Carga no Restringida de Archivos de Tipo Peligrosos • https://github.com/firefly-iii/firefly-iii/commit/a85b6420c19ace35134f896e094e1971d8c7954b https://huntr.dev/bounties/5267ec1c-d204-40d2-bd4f-6c2dd495ee18 • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2021-3819 – Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
https://notcve.org/view.php?id=CVE-2021-3819
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) firefly-iii es vulnerable a un ataque de tipo Cross-Site Request Forgery (CSRF) • https://github.com/firefly-iii/firefly-iii/commit/578f350498b75f31d321c78a608c7f7b3b7b07e9 https://huntr.dev/bounties/da82f7b6-4ffc-4109-87a4-a2a790bd44e5 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2021-3730 – Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
https://notcve.org/view.php?id=CVE-2021-3730
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) firefly-iii, es vulnerable a un ataque de tipo Cross-Site Request Forgery (CSRF) • https://github.com/firefly-iii/firefly-iii/commit/f80178b1b2b7864d17500a131d570c353c9a26f6 https://huntr.dev/bounties/ea181323-51f8-46a2-a60f-6a401907feb7 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2021-3729 – Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
https://notcve.org/view.php?id=CVE-2021-3729
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) firefly-iii, es vulnerable a un ataque de tipo Cross-Site Request Forgery (CSRF) • https://github.com/firefly-iii/firefly-iii/commit/06d319cd71b7787aa919b3ba1ccf51e4ade67712 https://huntr.dev/bounties/d32f3d5a-0738-41ba-89de-34f2a772de76 • CWE-352: Cross-Site Request Forgery (CSRF) •