CVE-2019-14671

Firefly III 4.7.17.3 is vulnerable to local file enumeration

published August 5, 2019

CVSS
—
EPSS
0%
Percentile
39.9
In the wild
Unconfirmed
What it is

Firefly III 4.7.17.3 is vulnerable to local file enumeration. An attacker can enumerate local files due to the lack of protocol scheme sanitization, such as for file:/// URLs. This is related to fints_url to import/job/configuration, and import/create/fints.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00472 · 39.9th percentile
Published
2019-08-05T19:23Z
EPSS history
Timeline
  • 05 AUG 19:23Z
    Firefly III 4.7.17.3 is vulnerable to local file enumeration
    cvelistv5