← Back

CVE-2023-1789

nvd nist
Published: Apr 1, 2023Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Improper Input Validation in GitHub repository firefly-iii/firefly-iii prior to 6.0.0.

Affected (5)

Firefly Iii
1 product
Firefly Iii
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Firefly Iii
Firefly Iii
Before 5.7.18
Firefly Iii
Version 5.8.0 alpha1
Firefly Iii
Version 6.0.0 alpha1
Firefly Iii
Version 6.0.0 alpha2
Firefly Iii
Version 6.0.0 beta1

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

Source: security@huntr.dev
Patch
Source: security@huntr.dev
Permissions Required
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Permissions Required

Timeline

No history available yet.