GHSA-c676-mcw3-qg55

GitHub Security Advisory

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

✓ GitHub Reviewed MODERATE Has CVE

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

Packagist grumpydictator/firefly-iii

Affected versions: 0 (fixed in 5.6.0)

CVE-2021-3730

GHSA ID

GHSA-c676-mcw3-qg55

Published

August 25, 2021 2:50 PM

Last Modified

August 27, 2021 12:48 PM

CVSS Score

5.0 /10

Primary Ecosystem

Packagist

Primary Package

grumpydictator/firefly-iii

GitHub Reviewed

✓ Yes

Last updated: July 12, 2025 6:29 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.