CVE-2021-3846
1 advisory.
Packagist/grumpydictator/firefly-iii CVE-2021-3846: high 8.8, EPSS 0.78%
Unrestricted File Upload vulnerability in Firefly III
Action: Upgrade grumpydictator/firefly-iii to 5.6.2 or later.
composer require grumpydictator/firefly-iii:5.6.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.6.2 | - |
Fixed versions
| 5.6.2 |
Sources
- osv: GHSA-5gq7-826w-8282
- https://nvd.nist.gov/vuln/detail/CVE-2021-3846
- https://github.com/firefly-iii/firefly-iii/commit/a85b6420c19ace35134f896e094e1971d8c7954b
- https://huntr.dev/bounties/5267ec1c-d204-40d2-bd4f-6c2dd495ee18
CVE-2021-3846 · published · modified · JSON