[MEDIUM] firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

PKSA-kkxm-4vhh-v3rz CVE-2021-3728 GHSA-xp5q-77mh-6hm2

Affected package: grumpydictator/firefly-iii

Affected version: <5.6.0

Reported by:
GitHub