CVE-2024-22075

Summary

Firefly III (aka firefly-iii) before 6.1.1 allows webhooks HTML Injection.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/firefly-iii/firefly-iii/releases/tag/v6.1.1

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/firefly-iii/firefly-iii/releases/tag/v6.1.1
• https://www.sonarsource.com/blog/front-end-frameworks-when-bypassing-built-in-sanitization-might-backfire/

• ←Previous
• Next→