{"action":"Upgrade grumpydictator/firefly-iii to 5.6.2 or later.","affected":[{"fixed":"5.6.2","introduced":"0"}],"component":"grumpydictator/firefly-iii","cve_ids":["CVE-2021-3846"],"ecosystem":"Packagist","epss":0.00779,"exploited":false,"fixed_versions":["5.6.2"],"ghsa_id":"GHSA-5gq7-826w-8282","id":"tcs_01M5KEW2NYX5TTDXVKAD6R0BDM","modified_at":"2024-02-16T08:18:59.368852Z","published_at":"2022-05-24T19:18:01Z","references":["https://osv.dev/vulnerability/GHSA-5gq7-826w-8282","https://nvd.nist.gov/vuln/detail/CVE-2021-3846","https://github.com/firefly-iii/firefly-iii/commit/a85b6420c19ace35134f896e094e1971d8c7954b","https://huntr.dev/bounties/5267ec1c-d204-40d2-bd4f-6c2dd495ee18"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-5gq7-826w-8282","url":"https://osv.dev/vulnerability/GHSA-5gq7-826w-8282"}],"summary":"Unrestricted File Upload vulnerability in Firefly III"}