GitHub Advisoryadvisory · Packagist
GHSA-56cx-wf47-hx7w No Restriction of Excessive Authentication Attempts in Firefly III
MEDIUM
Official page ↗
- Aliases
- CVE-2021-3663
- Ecosystem
- Packagist
- Packages
- grumpydictator/firefly-iii
- Severity
- Moderate
- CVSS vector
- CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- Weaknesses
- CWE-307
- Reviewed
- 2021-08-02
Affected packages
• Packagist grumpydictator/firefly-iii: < 5.5.13 → fixed in 5.5.13
Description
firefly-iii is vulnerable to Improper Lack of Restriction of Excessive Authentication Attempts
Related
Alias · CVE (1)
- CVE-2021-3663 firefly-iii is vulnerable to Improper Restriction of Excessive Authentication Attempts vulnerability
Weakness · CWE (1)
- CWE-307 Improper Restriction of Excessive Authentication Attempts weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2021-3663 advisory
- https://github.com/firefly-iii/firefly-iii/commit/afc9f4b7ebc8a240c85864a6e1abda62bfeefae8 web
- https://github.com/firefly-iii/firefly-iii package
- https://github.com/firefly-iii/firefly-iii/releases/tag/5.5.13 web
- https://huntr.dev/bounties/497bdf6d-7dba-49c3-8011-1c64dfbb3380 web