Description
Incorrect access control in the webhook management component of Project Firefly III v6.5.9 allows attackers to scan internal resources via a crafted POST request.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | grumpydictator/firefly-iii | <= 6.5.9 | — | GHSA-9mmg-q95p-gp67 |