Non évaluée
Firefly III before 4.7.17.3 is vulnerable to reflected XSS due to lack of filtration of user-supplied data in a search query. NOTE: It is asserted tha...
CVE-2019-13646
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
Firefly III before 4.7.17.3 is vulnerable to reflected XSS due to lack of filtration of user-supplied data in a search query. NOTE: It is asserted that an attacker must have the same access rights as the user in order to be able to execute the vulnerability
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- patch github.com
- report github.com