Packagist/grumpydictator/firefly-iii: medium
Firefly III user API endpoints expose all users' information to any authenticated user (IDOR)
Action: Upgrade grumpydictator/firefly-iii to 6.5.1 or later.
composer require grumpydictator/firefly-iii:6.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.4.23 | 6.5.1 | - |
Fixed versions
| 6.5.1 |
Sources
- osv: GHSA-5q8v-j673-m5v4
- https://github.com/firefly-iii/firefly-iii/security/advisories/GHSA-5q8v-j673-m5v4
- https://github.com/firefly-iii/firefly-iii
published · modified · JSON