CVE-2023-1031

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the settings endpoint and firstname parameter...

CVE-2023-1031

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the settings endpoint and firstname parameter...

CVE-2023-1031

CVE-2023-1031 affects MonicaHQ 4.0.0. An authenticated remote attacker can exploit the CSTI vulnerability in the settings endpoint via the first_name parameter to execute malicious code in the application. CVSS 3.1 metrics indicate high impact across confidentiality, integrity, and availability w...