Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 26
Reset filtersFirefly II has Stored XSS in Audit Log Entry view via piggy bank name (ale.twig)
Firefly III user API endpoints expose all users' information to any authenticated user (IDOR)
Firefly III has a MFA bypass in oauth flow
C5 Firefly III CSV Injection.
Firefly III allows webhooks HTML Injection.
Firefly III insufficiently expires sessions
Firefly III vulnerable to improper input validation
Improper Authorization in grumpydictator/firefly-iii
Unrestricted File Upload vulnerability in Firefly III
Firefly III vulnerable to reflected cross-site scripting
Firefly III vulnerable to stored XSS
Firefly III vulnerable to image-based stored XSS
Firefly III vulnerable to stored XSS
Cross Site Request Forgery in firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery in firefly-iii
Cross-Site Request Forgery in firefly-iii
Open Redirect in firefly-iii
Cross-Site Request Forgery in firefly-iii
Improper Input Validation in Firefly III
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.