Firefly Iii CVE-2023-1788

CRITICAL

Insufficient Session Expiration (CWE-613)

2023-04-05 security@huntr.dev

Information Disclosure Firefly Iii

9.8

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

Apr 05, 2023 - 16:15 nvd

CRITICAL 9.8

DescriptionNVD

Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6.

AnalysisAI

Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-613. Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6. Affected products include: Firefly-Iii Firefly Iii. Version information: prior to 6..

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Firefly Iii

View all

CVE-2021-3901 HIGH This Week POC

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF). Rated high severity (CVSS 8.8), this vulnerability is re

CVE-2021-3846 HIGH This Week POC

firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type. Rated high severity (CVSS 8.8), this vulne

CVE-2021-3819 HIGH This Week POC

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF). Rated high severity (CVSS 8.8), this vulnerability is re

CVE-2021-3663 HIGH This Week POC

firefly-iii is vulnerable to Improper Restriction of Excessive Authentication Attempts. Rated high severity (CVSS 7.5),

CVE-2023-0298 MEDIUM This Month POC

Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0. Rated medium severity (CVSS 6.5), t

CVE-2021-3900 MEDIUM This Month POC

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF). Rated medium severity (CVSS 6.5), this vulnerability is

CVE-2021-3728 MEDIUM This Month POC

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF). Rated medium severity (CVSS 6.5), this vulnerability is

CVE-2019-14667 MEDIUM This Month POC

Firefly III 4.7.17.4 is vulnerable to multiple stored XSS issues due to the lack of filtration of user-supplied data in

CVE-2023-1789 CRITICAL Act Now

Improper Input Validation in GitHub repository firefly-iii/firefly-iii prior to 6.0.0. Rated critical severity (CVSS 9.8

CVE-2021-3851 MEDIUM This Month POC

firefly-iii is vulnerable to URL Redirection to Untrusted Site. Rated medium severity (CVSS 5.4), this vulnerability is

CVE-2019-14672 MEDIUM This Month POC

Firefly III 4.7.17.5 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the liability na

CVE-2019-14670 MEDIUM This Month POC

Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the bill name fi

Same weakness CWE-613 – Insufficient Session Expiration

View all

CVE-2022-36179 CRITICAL POC

CVE-2026-26342 CRITICAL POC

CVE-2016-5069 CRITICAL POC

CVE-2024-29401 CRITICAL POC

CVE-2023-49091 CRITICAL POC

CVE-2023-5865 CRITICAL POC

CVE-2023-5838 CRITICAL POC

CVE-2023-1854 CRITICAL POC

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

CVE-2017-5638 CRITICAL POC

CVE-2025-24813 CRITICAL POC

CVE-2015-1701 HIGH POC

CVE-2017-0147 HIGH POC

CVE-2014-6324 HIGH POC

CVE-2023-7028 CRITICAL POC

CVE-2017-0213 HIGH POC

Share

CVE-2023-1788 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy