Vulnerabilidades en firefly-iii
17 resultadosAnálisis Vexday
Firefly-III apresenta 16 vulnerabilidades catalogadas, nenhuma sob exploração ativa ou classificada como crítica, indicando risco contido. A ausência de divulgações recentes e a fraqueza dominante em CSRF (CWE-352) sugerem vulnerabilidades legadas e de baixa complexidade de exploração. O perfil atual não apresenta ameaça imediata, mas requer atenção à validação de tokens em operações sensíveis.
CVE-2021-3846MEDIUMUnrestricted Upload of File with Dangerous Type in firefly-iii/firefly-iiiEPSS 0.8%CVE-2021-3663MEDIUMImproper Restriction of Excessive Authentication Attempts in firefly-iii/firefly-iiiEPSS 0.7%CVE-2023-0298MEDIUMIncorrect Authorization in firefly-iii/firefly-iiiEPSS 0.6%CVE-2024-37893MEDIUMMFA bypass in oauth flow in Firefly IIIEPSS 0.6%CVE-2021-3851MEDIUMOpen Redirect in firefly-iii/firefly-iiiEPSS 0.6%CVE-2021-3819MEDIUMCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiEPSS 0.5%CVE-2021-3901LOWCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiEPSS 0.5%CVE-2021-3900MEDIUMCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiEPSS 0.5%CVE-2021-3728MEDIUMCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiEPSS 0.5%CVE-2021-3730MEDIUMCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiEPSS 0.5%CVE-2023-1788MEDIUMInsufficient Session Expiration in firefly-iii/firefly-iiiEPSS 0.4%CVE-2021-4005MEDIUMCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiEPSS 0.4%CVE-2021-4015MEDIUMCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiEPSS 0.4%CVE-2021-3921MEDIUMCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiEPSS 0.4%CVE-2021-3729MEDIUMCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiEPSS 0.4%CVE-2023-1789MEDIUMImproper Input Validation in firefly-iii/firefly-iiiEPSS 0.3%CVE-2026-71250MEDIUMFirefly III - Webhook URL Validation Explicitly Allows Loopback and Is Bypassable via DNS RebindingEPSS 0.2%