GHSA-356r-77q8-f64f

GitHub Security Advisory

Cross-Site Request Forgery in firefly-iii

✓ GitHub Reviewed MODERATE Has CVE

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF). This has been mitigated in version 5.6.1

Packagist grumpydictator/firefly-iii

Affected versions: 0 (fixed in 5.6.1)

CVE-2021-3819

GHSA ID

GHSA-356r-77q8-f64f

Published

September 29, 2021 5:12 PM

Last Modified

September 30, 2021 6:35 PM

CVSS Score

5.0 /10

Primary Ecosystem

Packagist

Primary Package

grumpydictator/firefly-iii

GitHub Reviewed

✓ Yes

Last updated: July 12, 2025 6:29 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.