CVE-2023-30787

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `people:id/introductions`...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the people:id/introductions endpoint and first_met_additional_info parameter.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory fluidattacks.com
advisory github.com
advisory nvd.nist.gov
web monicahq.com