En bref
- CVE-2019-14671 est une vulnérabilité FAIBLE (CVSS 3.3) touchant grumpydictator/firefly-iii, firefly iii (firefly-iii).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.47%, plus élevée que 40.9% des vulnérabilités.
- Correctif : mettre à jour vers 4.7.17.4 ou plus récent.
Description
Firefly III 4.7.17.3 is vulnerable to local file enumeration. An attacker can enumerate local files due to the lack of protocol scheme sanitization, such as for file:/// URLs. This is related to fints_url to import/job/configuration, and import/create/fints.
NVD description
Firefly III 4.7.17.3 is vulnerable to local file enumeration. An attacker can enumerate local files due to the lack of protocol scheme sanitization, such as for file:/// URLs. This is related to fints_url to import/job/configuration, and import/create/fints.
Autres vulnérabilités de grumpydictator/firefly-iii
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free