What’s Vulnerable › Products

firefly-iii/firefly-iii vulnerabilities

26 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your firefly-iii/firefly-iii version is affected

Latest firefly-iii/firefly-iii vulnerabilities

• CVE-2024-22075 — (CVSS 6.1)
• CVE-2023-1788 — Insufficient Session Expiration in firefly-iii/firefly-iii (CVSS 9.8)
• CVE-2023-1789 — Improper Input Validation in firefly-iii/firefly-iii (CVSS 9.8)
• CVE-2023-0298 — Incorrect Authorization in firefly-iii/firefly-iii (CVSS 6.5)
• CVE-2021-4005 — Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii (CVSS 4.3)
• CVE-2021-4015 — Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii (CVSS 4.3)
• CVE-2021-3921 — Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii (CVSS 4.3)
• CVE-2021-3901 — Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii (CVSS 8.8)
• CVE-2021-3900 — Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii (CVSS 6.5)
• CVE-2021-3851 — Open Redirect in firefly-iii/firefly-iii (CVSS 5.4)
• CVE-2021-3846 — Unrestricted Upload of File with Dangerous Type in firefly-iii/firefly-iii (CVSS 8.8)
• CVE-2021-3819 — Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii (CVSS 8.8)
• CVE-2021-3730 — Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii (CVSS 6.5)
• CVE-2021-3729 — Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii (CVSS 4.3)
• CVE-2021-3728 — Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii (CVSS 6.5)
• CVE-2021-3663 — Improper Restriction of Excessive Authentication Attempts in firefly-iii/firefly-iii (CVSS 7.5)
• CVE-2019-14672 — (CVSS 5.4)
• CVE-2019-14671 — (CVSS 3.3)
• CVE-2019-14670 — (CVSS 5.4)
• CVE-2019-14669 — (CVSS 5.4)
• CVE-2019-14668 — (CVSS 5.4)
• CVE-2019-14667 — (CVSS 6.1)
• CVE-2019-13647 — (CVSS 5.4)
• CVE-2019-13646 — (CVSS 5.4)
• CVE-2019-13645 — (CVSS 5.4)