CVE-2024-27730

Insecure Permissions vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information and execute arbitrary code via the cid parameter of the calendar event feature...

CVE-2024-27730

Insecure Permissions vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information and execute arbitrary code via the cid parameter of the calendar event feature...

CVE-2024-27729

Friendica version 2023.12 is vulnerable to a Cross-Site Scripting (XSS) vulnerability (CWE-79) within the calendar event feature . A remote attacker can exploit the location parameter to obtain sensitive information. As a temporary workaround, users should restrict access to the calendar event fe...

CVE-2024-27729: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the location parameter of the calendar event feature...