← All advisories

Critical severity9.8NVD Advisory· Published Apr 5, 2023· Updated Jun 17, 2026

CVE-2023-1788

CVE-2023-1788

Description

Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
grumpydictator/firefly-iiiPackagist	< 6.0.0	6.0.0

Affected products

7

Firefly Iii/Firefly Iii5 versions
cpe:2.3:a:firefly-iii:firefly_iii:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:firefly-iii:firefly_iii:*:*:*:*:*:*:*:*range: <6.0.0
- cpe:2.3:a:firefly-iii:firefly_iii:6.0.0:alpha1:*:*:*:*:*:*
- cpe:2.3:a:firefly-iii:firefly_iii:6.0.0:alpha2:*:*:*:*:*:*
- cpe:2.3:a:firefly-iii:firefly_iii:6.0.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:firefly-iii:firefly_iii:6.0.0:beta2:*:*:*:*:*:*
ghsa-coords
pkg:composer/grumpydictator/firefly-iii
Range: < 6.0.0
Firefly Iii/Firefly Iii/firefly Iiiv5
Range: unspecified

Patches

Vulnerability mechanics

References

4

github.com/firefly-iii/firefly-iii/commit/68f398f97cbe1870fc098d8460bf903b9c3fab30nvdPatchWEB
github.com/advisories/GHSA-h7vv-46p5-prmhghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-1788ghsaADVISORY
huntr.dev/bounties/79323c9e-e0e5-48ef-bd19-d0b09587ccb2nvdPermissions RequiredWEB

News mentions

0

No linked articles in our index yet.