CVE-2021-3846

Unrestricted Upload of File with Dangerous Type in firefly-iii/firefly-iii

CVSS 6.3 MEDIUMEPSS 0.8%CWE-434

firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

Affected products

firefly-iii · firefly-iii/firefly-iii

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/firefly-iii/firefly-iii/commit/a85b6420c19ace35134f896e094e1971d8c7954b https://huntr.dev/bounties/5267ec1c-d204-40d2-bd4f-6c2dd495ee18