{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"5.6.2"}],"component":"grumpydictator/firefly-iii","cve_ids":["CVE-2021-3901"],"ecosystem":"Packagist","epss":0.00554,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-rqgp-ccph-5w65","id":"tcs_01M5KF8G42NH77BDGHBTZ0MRFC","modified_at":"2023-11-08T04:06:29.425114Z","published_at":"2021-10-28T23:14:14Z","references":["https://osv.dev/vulnerability/GHSA-rqgp-ccph-5w65","https://nvd.nist.gov/vuln/detail/CVE-2021-3901","https://github.com/firefly-iii/firefly-iii/commit/b42d8d1e305cad70d9b83b33cd8e0d7a4b2060c2","https://github.com/firefly-iii/firefly-iii","https://huntr.dev/bounties/62508fdc-c26b-4312-bf75-fd3a3f997464"],"severity":{"label":"low","score":3.5},"sources":[{"source":"osv","source_id":"GHSA-rqgp-ccph-5w65","url":"https://osv.dev/vulnerability/GHSA-rqgp-ccph-5w65"}],"summary":"Cross-Site Request Forgery in firefly-iii"}