Description

firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type

Related CPE's

a

firefly-iii

firefly_iii

Vulnerable

References

https://github.com/firefly-iii/firefly-iii/commit/a85b6420c19ace35134f896e094e1971d8c7954b

PatchThird Party Advisory

https://huntr.dev/bounties/5267ec1c-d204-40d2-bd4f-6c2dd495ee18

ExploitPatchThird Party Advisory

https://github.com/firefly-iii/firefly-iii/commit/a85b6420c19ace35134f896e094e1971d8c7954b

PatchThird Party Advisory

https://huntr.dev/bounties/5267ec1c-d204-40d2-bd4f-6c2dd495ee18

ExploitPatchThird Party Advisory

Weaknesses

[email protected]

Secondary
CWE-434

[email protected]

Primary
CWE-434

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 · High

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2021-10-19T11:15:11.567Z

4 years ago

Last modified

2024-11-21T05:22:38.450Z

1 year ago