Lucene search
HistoryApr 01, 2023 - 2:15 a.m.
CVE-2023-1789
github repository
firefly-iii
input validation
prior to 6.0.0
cve-2023-1789
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
6.3 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
56.2%
Improper Input Validation in GitHub repository firefly-iii/firefly-iii prior to 6.0.0.
Affected configurations
Node
firefly-iiifirefly_iiiRange<5.7.18
ORfirefly-iiifirefly_iiiMatch5.8.0alpha1
ORfirefly-iiifirefly_iiiMatch6.0.0alpha1
ORfirefly-iiifirefly_iiiMatch6.0.0alpha2
ORfirefly-iiifirefly_iiiMatch6.0.0beta1
Related
cve
cve
CVE-2023-1789
2023-04-01 02:15:07
osv
osv
Firefly III vulnerable to improper input validation
2023-04-01 03:30:16
CVE-2023-1789
2023-04-01 02:15:07
huntr
huntr
HTML injection leads to Open Redirect
2023-02-15 23:07:14
cvelist
cvelist
CVE-2023-1789 Improper Input Validation in firefly-iii/firefly-iii
2023-04-01 00:00:00
github
github
Firefly III vulnerable to improper input validation
2023-04-01 03:30:16
veracode
veracode
Cross Site Scripting (XSS)
2023-04-17 12:46:59
prion
prion
Input validation
2023-04-01 02:15:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
6.3 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
56.2%
Related for NVD:CVE-2023-1789