Improper Input Validation in firefly-iii/firefly-iii

CVE-2023-1789

What is CVE-2023-1789?

Firefly III prior to version 6.0.0 is susceptible to an improper input validation vulnerability, which could potentially allow an attacker to inject malicious inputs. This can lead to unintended behaviors in the application and may allow unauthorized actions. Users are advised to update to the latest version to mitigate this risk. For further details, refer to the GitHub repository and the Huntr bounty.

References