Lucene search
Veracode Vulnerability DatabaseVERACODE:21001HistoryAug 06, 2019 - 6:23 a.m.
Cross-site Scripting (XSS)
2019-08-0606:23:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
21.4%
grumpydictator/firefly-iii is vulnerable to cross-site scripting (XSS). The attack is possible because it does not escape the user provided data increate-from-bill name field, allowing an attacker to inject malicious script.
| CPE | Name | Operator | Version |
|---|---|---|---|
| grumpydictator/firefly-iii | le | 4.7.17.3 |
Related
cvelist
cvelist
CVE-2019-14670
2019-08-05 19:23:15
osv
osv
CVE-2019-14670
2019-08-05 20:15:12
nvd
nvd
CVE-2019-14670
2019-08-05 20:15:12
cve
cve
CVE-2019-14670
2019-08-05 20:15:12
prion
prion
Design/Logic Flaw
2019-08-05 20:15:00