GitHub Advisoryadvisory · Packagist

GHSA-7mc4-jp4f-v2j2 Improper Authorization in grumpydictator/firefly-iii

MEDIUM Published 2023-01-14 Modified 2023-01-25 Official page ↗
Aliases
CVE-2023-0298
Ecosystem
Packagist
Packages
grumpydictator/firefly-iii
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-285, CWE-863
Reviewed
2023-01-25

Affected packages

• Packagist grumpydictator/firefly-iii: < 5.8.0 → fixed in 5.8.0

Description

Improper Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0.

Related

Alias · CVE (1)

  • CVE-2023-0298 Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0. vulnerability

Weakness · CWE (2)

  • CWE-285 Improper Authorization weakness
  • CWE-863 Incorrect Authorization weakness

References