Moderate severityNVD Advisory· Published Oct 19, 2021· Updated Aug 3, 2024
Open Redirect in firefly-iii/firefly-iii
CVE-2021-3851
Description
firefly-iii is vulnerable to URL Redirection to Untrusted Site
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
grumpydictator/firefly-iiiPackagist | < 5.6.2 | 5.6.2 |
Affected products
2- Range: unspecified
Patches
Vulnerability mechanics
References
4- github.com/advisories/GHSA-5fvx-5p2r-4mvpghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2021-3851ghsaADVISORY
- github.com/firefly-iii/firefly-iii/commit/8662dfa4c0f71efef61c31dc015c6f723db8318dghsax_refsource_MISCWEB
- huntr.dev/bounties/549a1040-9b5e-420b-9b80-20700dd9d592ghsax_refsource_CONFIRMWEB
News mentions
0No linked articles in our index yet.