CVE-2021-3901
1 advisory.
Packagist/grumpydictator/firefly-iii CVE-2021-3901: low 3.5
Cross-Site Request Forgery in firefly-iii
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 5.6.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-rqgp-ccph-5w65
- https://nvd.nist.gov/vuln/detail/CVE-2021-3901
- https://github.com/firefly-iii/firefly-iii/commit/b42d8d1e305cad70d9b83b33cd8e0d7a4b2060c2
- https://github.com/firefly-iii/firefly-iii
- https://huntr.dev/bounties/62508fdc-c26b-4312-bf75-fd3a3f997464
CVE-2021-3901 · published · modified · JSON