GHSA-5fvx-5p2r-4mvp

GitHub Security Advisory

Open Redirect in firefly-iii

✓ GitHub Reviewed MODERATE Has CVE

firefly-iii is vulnerable to URL Redirection to Untrusted Site

Packagist grumpydictator/firefly-iii

Affected versions: 0 (fixed in 5.6.2)

CVE-2021-3851

GHSA ID

GHSA-5fvx-5p2r-4mvp

Published

October 21, 2021 5:48 PM

Last Modified

October 25, 2021 8:08 PM

CVSS Score

5.0 /10

Primary Ecosystem

Packagist

Primary Package

grumpydictator/firefly-iii

GitHub Reviewed

✓ Yes

Last updated: July 13, 2025 6:28 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.