CVE-2021-4005

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published
Dec 4, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-400509.8There is an out-of-bounds read vulnerability in the IFAA module. Successful exploitation of this vulnerability may cause stack overflow.CVE-2021-400517.5There is an unauthorized access vulnerability in system components. Successful exploitation of this vulnerability will affect confidentialitCVE-2021-400527.5There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vulnerability may affect CVE-2021-400539.1There is a permission control vulnerability in the Nearby module.Successful exploitation of this vulnerability will affect availability and CVE-2021-400547.5There is an integer underflow vulnerability in the atcmdserver module. Successful exploitation of this vulnerability may affect integrity.CVE-2021-400555.9There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitation of this vulnerabilCVE-2021-400567.5There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerabiCVE-2021-400577.5There is a heap-based and stack-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability maCVE-2021-400587.5There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availabCVE-2021-400596.5There is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect confidentiality.CVE-2021-400607.5There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availabCVE-2021-400617.5There is a vulnerability of accessing resources using an incompatible type (type confusion) in the Bastet module. Successful exploitation of
CVE-2021-4005: Medium severity, CVSS 4.3 | Vulnix