CVE-2021-3851

EUVD-2021-2160
firefly-iii is vulnerable to URL Redirection to Untrusted Site
Open Redirect
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.4 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
@huntrdevCNA
5 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 37%
Affected Products (NVD)
VendorProductVersion
firefly-iiifirefly_iii
𝑥
< 5.6.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/firefly-iii/firefly-iii/commit/8662dfa4c0f71efef61c31dc015c6f723db8318d
https://huntr.dev/bounties/549a1040-9b5e-420b-9b80-20700dd9d592
https://github.com/firefly-iii/firefly-iii/commit/8662dfa4c0f71efef61c31dc015c6f723db8318d
https://huntr.dev/bounties/549a1040-9b5e-420b-9b80-20700dd9d592