3 matches found
CVE-2023-1031
CVE-2023-1031 affects MonicaHQ 4.0.0. An authenticated remote attacker can exploit the CSTI vulnerability in the settings endpoint via the first_name parameter to execute malicious code in the application. CVSS 3.1 metrics indicate high impact across confidentiality, integrity, and availability w...
CVE-2023-1031
MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the settings endpoint and firstname parameter...
CVE-2023-1031
MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the settings endpoint and firstname parameter...