← All advisories

Moderate severityNVD Advisory· Published Jan 14, 2023· Updated Apr 7, 2025

Incorrect Authorization in firefly-iii/firefly-iii

CVE-2023-0298

Description

Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
grumpydictator/firefly-iiiPackagist	< 5.8.0	5.8.0

Affected products

2

ghsa-coords
pkg:composer/grumpydictator/firefly-iii
Range: < 5.8.0
Firefly Iii/Firefly Iii/firefly Iiiv5
Range: unspecified

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-7mc4-jp4f-v2j2ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-0298ghsaADVISORY
github.com/firefly-iii/firefly-iii/commit/db0500dcf0d4f1990fc7a377ef0d56c3884fcaa4ghsaWEB
huntr.dev/bounties/9689052c-c1d7-4aae-aa08-346c9b6e04edghsaWEB

News mentions

0

No linked articles in our index yet.