CVE-2021-3728

Description

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://huntr.dev/bounties/dd54c5a1-0d4a-4f02-a111-7ce4ddc67a4d ↗
• https://github.com/firefly-iii/firefly-iii/commit/14cdce113e0eb8090d09066fcd2b5cf03b5ac84e ↗