GHSA-gp6w-ccqv-p7qr

GitHub Security Advisory

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

✓ GitHub Reviewed MODERATE Has CVE

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

Packagist grumpydictator/firefly-iii

Affected versions: 0 (fixed in 5.6.0)

CVE-2021-3729

GHSA ID

GHSA-gp6w-ccqv-p7qr

Published

August 25, 2021 2:49 PM

Last Modified

August 24, 2021 8:06 PM

CVSS Score

5.0 /10

Primary Ecosystem

Packagist

Primary Package

grumpydictator/firefly-iii

GitHub Reviewed

✓ Yes

Last updated: July 12, 2025 6:29 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.