Loading HuntDB...

GHSA-xp5q-77mh-6hm2

GitHub Security Advisory

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

✓ GitHub Reviewed MODERATE Has CVE

Advisory Details

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

Affected Packages

Packagist grumpydictator/firefly-iii
Affected versions: 0 (fixed in 5.6.0)

Related CVEs

Key Information

GHSA ID
GHSA-xp5q-77mh-6hm2
Published
August 25, 2021 2:50 PM
Last Modified
August 24, 2021 8:02 PM
CVSS Score
5.0 /10
Primary Ecosystem
Packagist
Primary Package
grumpydictator/firefly-iii
GitHub Reviewed
✓ Yes

Dataset

Last updated: July 13, 2025 6:28 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.