← back
CVE-2023-1789mediumCWE-20

Improper Input Validation in firefly-iii/firefly-iii

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.2epss 0.3%
exploitation probability
0.3%top 74% of all CVEs
observed exploitation
nono source reports it
Improper Input Validation in GitHub repository firefly-iii/firefly-iii prior to 6.0.0.
CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L