High severity8.8NVD Advisory· Published Oct 27, 2021· Updated Jun 17, 2026
CVE-2021-3901
CVE-2021-3901
Description
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
grumpydictator/firefly-iiiPackagist | <= 5.6.2 | — |
Affected products
3- Range: unspecified
Patches
Vulnerability mechanics
References
4- github.com/firefly-iii/firefly-iii/commit/b42d8d1e305cad70d9b83b33cd8e0d7a4b2060c2nvdPatchThird Party AdvisoryWEB
- huntr.dev/bounties/62508fdc-c26b-4312-bf75-fd3a3f997464nvdExploitIssue TrackingPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-rqgp-ccph-5w65ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2021-3901ghsaADVISORY
News mentions
0No linked articles in our index yet.