Approved changes feed: RSS · Atom

cpe:2.3:a:firefly-iii:firefly-iii/firefly-iii:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFirefly Iii (24e066bc-dd3a-5963-b25c-dc744c7dfb53)
ProductFirefly Iii/Firefly Iii (20b77752-f5a5-50e9-86cb-fd380670661b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-1789 vulnerable 2026-06-08 05:52:37.041853 Improper Input Validation in firefly-iii/firefly-iii
MEDIUM (5.2)
Improper Input Validation in GitHub repository firefly-iii/firefly-iii prior to 6.0.0.
Published: 2023-04-01T00:00:00.000Z
Updated: 2025-02-11T16:44:22.914Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1788 vulnerable 2026-06-08 05:52:37.038095 Insufficient Session Expiration in firefly-iii/firefly-iii
MEDIUM (5.4)
Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6.
Published: 2023-04-05T00:00:00.000Z
Updated: 2025-02-10T20:41:33.690Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0298 vulnerable 2026-06-08 05:52:04.711324 Incorrect Authorization in firefly-iii/firefly-iii
MEDIUM (6.5)
Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0.
Published: 2023-01-14T00:00:00.000Z
Updated: 2025-04-07T18:41:21.353Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-4015 vulnerable 2026-06-08 05:38:08.075317 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
MEDIUM (4.3)
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
Published: 2021-12-01T10:20:11.000Z
Updated: 2024-08-03T17:16:03.289Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-4005 vulnerable 2026-06-08 05:38:08.063935 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
MEDIUM (4.3)
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
Published: 2021-12-04T12:00:11.000Z
Updated: 2024-08-03T17:16:03.273Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3921 vulnerable 2026-06-08 05:33:54.580142 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3901 vulnerable 2026-06-08 05:33:54.494952 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3900 vulnerable 2026-06-08 05:33:54.494501 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3851 vulnerable 2026-06-08 05:33:54.445960 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3846 vulnerable 2026-06-08 05:33:54.430661 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3819 vulnerable 2026-06-08 05:33:54.373703 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3730 vulnerable 2026-06-08 05:33:53.857920 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3729 vulnerable 2026-06-08 05:33:53.857438 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3728 vulnerable 2026-06-08 05:33:53.855789 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3663 vulnerable 2026-06-08 05:33:53.359932 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.