firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
References
Link | Resource |
---|---|
https://github.com/firefly-iii/firefly-iii/commit/03a1601bf343181df9f405dd2109aec483cb7053 | Patch Third Party Advisory |
https://huntr.dev/bounties/bf4ef581-325a-492d-a710-14fcb53f00ff | Exploit Patch Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: @huntrdev
Published: 2021-12-04T12:00:11
Updated: 2021-12-04T12:00:11
Reserved: 2021-11-23T00:00:00
Link: CVE-2021-4005
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-12-04T12:15:07.377
Modified: 2021-12-06T18:31:24.957
Link: CVE-2021-4005
JSON object: View
Redhat Information
No data.
CWE