CVE-2023-0298: Firefly-Iii Firefly Iii

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0.

Affected products

• Firefly-Iii Firefly Iii: before 5.8.0 (fixed in 5.8.0)

Published 2023-01-14. Last modified 2026-06-17.