Unrestricted File Upload vulnerability in Firefly III

2022-05-2419:18:01

Google

osv.dev

0.001 Low

EPSS

Percentile

41.1%

JSON

firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type

CPENameOperatorVersion
grumpydictator/firefly-iiieq5.5.7
grumpydictator/firefly-iiieq4.8.2-alpha.3
grumpydictator/firefly-iiieq5.0.0-beta.1
grumpydictator/firefly-iiieq4.7.6.1
grumpydictator/firefly-iiieq3.8.3
grumpydictator/firefly-iiieq4.7.1.2
grumpydictator/firefly-iiieq5.4.3
grumpydictator/firefly-iiieq4.3.7
grumpydictator/firefly-iiieq4.7.3
grumpydictator/firefly-iiieq5.0.0

Name	Operator	Version
grumpydictator/firefly-iii	eq	5.5.7
grumpydictator/firefly-iii	eq	4.8.2-alpha.3
grumpydictator/firefly-iii	eq	5.0.0-beta.1
grumpydictator/firefly-iii	eq	4.7.6.1
grumpydictator/firefly-iii	eq	3.8.3
grumpydictator/firefly-iii	eq	4.7.1.2
grumpydictator/firefly-iii	eq	5.4.3
grumpydictator/firefly-iii	eq	4.3.7
grumpydictator/firefly-iii	eq	4.7.3
grumpydictator/firefly-iii	eq	5.0.0