Em resumo
- CVE-2019-14671 é uma vulnerabilidade BAIXO (CVSS 3.3) que afeta grumpydictator/firefly-iii, firefly iii (firefly-iii).
- Chance de exploração nos próximos 30 dias (EPSS): 0.47%, maior que 40.8% das vulnerabilidades.
- Correção: atualize para 4.7.17.4 ou posterior.
Description
Firefly III 4.7.17.3 is vulnerable to local file enumeration. An attacker can enumerate local files due to the lack of protocol scheme sanitization, such as for file:/// URLs. This is related to fints_url to import/job/configuration, and import/create/fints.
NVD description
Firefly III 4.7.17.3 is vulnerable to local file enumeration. An attacker can enumerate local files due to the lack of protocol scheme sanitization, such as for file:/// URLs. This is related to fints_url to import/job/configuration, and import/create/fints.
Mais vulnerabilidades de grumpydictator/firefly-iii
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free