What is GHSA-356r-77q8-f64f?

GHSA-356r-77q8-f64f is a security advisory published by GitHub Security Advisories with Medium severity. Cross-Site Request Forgery in firefly-iii

Which CVE IDs does GHSA-356r-77q8-f64f cover?

GHSA-356r-77q8-f64f covers the following CVE IDs: CVE-2021-3819. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-356r-77q8-f64f?

GHSA-356r-77q8-f64f has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

Which products are affected by GHSA-356r-77q8-f64f?

GHSA-356r-77q8-f64f affects 1 product, including: composer/grumpydictator/firefly-iii:\u003c 5.6.1.

GHSA-356r-77q8-f64fMediumCVSS 4.3

Cross-Site Request Forgery in firefly-iii

Vendor

GitHub Security Advisories

Published

September 29, 2021

Last Modified

February 1, 2023

🔗 CVE IDs covered (1)

CVE-2021-3819 →

📋 Description

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF). This has been mitigated in version 5.6.1

🎯 Affected products1

composer/grumpydictator/firefly-iii:< 5.6.1

🔗 References (3)

https://github.com/firefly-iii/firefly-iii/commit/578f350498b75f31d321c78a608c7f7b3b7b07e9
https://huntr.dev/bounties/da82f7b6-4ffc-4109-87a4-a2a790bd44e5
https://github.com/advisories/GHSA-356r-77q8-f64f