GHSA-56cx-wf47-hx7w
No Restriction of Excessive Authentication Attempts in Firefly III
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | grumpydictator/firefly-iii | < 5.5.13 | 5.5.13 |
Details
As written in the advisory (Markdown source, shown as plain text).
firefly-iii is vulnerable to Improper Lack of Restriction of Excessive Authentication Attempts
References
External links from the advisory. They lead to third-party sites.
- https://nvd.nist.gov/vuln/detail/CVE-2021-3663
- https://github.com/firefly-iii/firefly-iii/commit/afc9f4b7ebc8a240c85864a6e1abda62bfeefae8
- https://github.com/firefly-iii/firefly-iii
- https://github.com/firefly-iii/firefly-iii/releases/tag/5.5.13
- https://huntr.dev/bounties/497bdf6d-7dba-49c3-8011-1c64dfbb3380