high7.5
CVE-2021-3663
No Restriction of Excessive Authentication Attempts in Firefly III
Impact
firefly-iii is vulnerable to Improper Lack of Restriction of Excessive Authentication Attempts
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | grumpydictator/firefly-iii | < 5.5.13 | 5.5.13 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Firefly-Iii | Firefly Iii | through 5.5.12 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/firefly-iii/firefly-iii/commit/afc9f4b7ebc8a240c85864a6e1abda62bfeefae8
- https://huntr.dev/bounties/497bdf6d-7dba-49c3-8011-1c64dfbb3380
- https://github.com/advisories/GHSA-56cx-wf47-hx7w
- https://nvd.nist.gov/vuln/detail/CVE-2021-3663
- https://github.com/firefly-iii/firefly-iii/releases/tag/5.5.13