CVE-2023-30788

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `people/add` endpoint and...

Original description

The description as published by the source.

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the people/add endpoint and nickName, description, lastName, middleName and firstName parameter.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory fluidattacks.com
advisory github.com
advisory nvd.nist.gov
web monicahq.com