CVE-2021-3900
1 advisory.
Packagist/grumpydictator/firefly-iii CVE-2021-3900: medium 6.5
Cross-Site Request Forgery in firefly-iii
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 5.6.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-pfj7-w373-gqch
- https://nvd.nist.gov/vuln/detail/CVE-2021-3900
- https://github.com/firefly-iii/firefly-iii/commit/c2c8c42ef3194d1aeba8c48240fe2e9063f77635
- https://github.com/firefly-iii/firefly-iii
- https://huntr.dev/bounties/909e55b6-ef02-4143-92e4-bc3e8397db76
CVE-2021-3900 · published · modified · JSON