Lucene search
Veracode Vulnerability DatabaseVERACODE:21003HistoryAug 06, 2019 - 6:44 a.m.
Cross-site Scripting (XSS)
2019-08-0606:44:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
21.4%
grumpydictator/firefly-iii is vulnerable to cross-site scripting (XSS). The attack is possible because it does not escape the user provided data in the asset account name field, allowing an attacker to inject malicious script through it.
| CPE | Name | Operator | Version |
|---|---|---|---|
| grumpydictator/firefly-iii | le | 4.7.17.3 |
Related
nvd
nvd
CVE-2019-14669
2019-08-05 20:15:12
cve
cve
CVE-2019-14669
2019-08-05 20:15:12
prion
prion
Cross site scripting
2019-08-05 20:15:00
osv
osv
CVE-2019-14669
2019-08-05 20:15:12
cvelist
cvelist
CVE-2019-14669
2019-08-05 19:23:23