Lucene search
PRIOn knowledge basePRION:CVE-2019-13646HistoryJul 18, 2019 - 3:15 a.m.
Design/Logic Flaw
2019-07-1803:15:00
PRIOn knowledge base
www.prio-n.com
2
0.001 Low
EPSS
Percentile
21.4%
DISPUTED Firefly III before 4.7.17.3 is vulnerable to reflected XSS due to lack of filtration of user-supplied data in a search query. NOTE: It is asserted that an attacker must have the same access rights as the user in order to be able to execute the vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| firefly_iii | lt | 4.7.17.3 |
Related
cve
cve
CVE-2019-13646
2019-07-18 03:15:10
cvelist
cvelist
CVE-2019-13646
2019-07-18 02:17:40
nvd
nvd
CVE-2019-13646
2019-07-18 03:15:10
github
github
Firefly III vulnerable to reflected cross-site scripting
2022-05-24 16:50:37
veracode
veracode
Cross-site Scripting (XSS)
2019-07-18 06:37:58
osv
osv
Firefly III vulnerable to reflected cross-site scripting
2022-05-24 16:50:37