{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"5.6.2"}],"component":"grumpydictator/firefly-iii","cve_ids":["CVE-2021-3900"],"ecosystem":"Packagist","epss":0.00551,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-pfj7-w373-gqch","id":"tcs_01M5KF6AJHZNZK6VK2QRRKGDY5","modified_at":"2023-11-08T04:06:29.363470Z","published_at":"2021-10-28T23:14:21Z","references":["https://osv.dev/vulnerability/GHSA-pfj7-w373-gqch","https://nvd.nist.gov/vuln/detail/CVE-2021-3900","https://github.com/firefly-iii/firefly-iii/commit/c2c8c42ef3194d1aeba8c48240fe2e9063f77635","https://github.com/firefly-iii/firefly-iii","https://huntr.dev/bounties/909e55b6-ef02-4143-92e4-bc3e8397db76"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-pfj7-w373-gqch","url":"https://osv.dev/vulnerability/GHSA-pfj7-w373-gqch"}],"summary":"Cross-Site Request Forgery in firefly-iii"}