CVE-2024-22075

Summary

CVE-2024-22075 is a newly disclosed vulnerability affecting the Firefly III financial management application. This issue allows an attacker to inject HTML code into webhooks, potentially leading to unintended execution of malicious scripts. Successful exploitation could result in data theft, unauthorized account access, or other malicious activities. It is recommended that users of Firefly III upgrade to version 6.1.1 or later to mitigate this risk. The vulnerability does not appear to affect versions 6.1.1 and above.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.