CVE-2023-30790

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the people:id/relationships endpoint and firstname and lastname parameter...

CVE-2023-30790

creationtimestamp| type| source ---|---|--- 2023-05-09 00:47:59+00:00| seen| https://t.me/cibsecurity/63502 2025-02-06 02:40:19+00:00| seen| Telegram/hbhkVLHn8Z2v4uRfOTwrOteRDb0ln3EG8HnnnnxvE5H3hCTq...

CVE-2023-30790

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the people:id/relationships endpoint and firstname and lastname parameter...