CVE-2024-54998

MonicaHQ v4.1.2 was discovered to contain an authenticated Client-Side Injection vulnerability via the Reason parameter at /people/h:id/debts/create...

CVE-2024-54998

MonicaHQ v4.1.2 was discovered to contain an authenticated Client-Side Injection vulnerability via the Reason parameter at /people/h:id/debts/create...

CVE-2024-54998

creationtimestamp| type| source ---|---|--- 2025-01-10 20:34:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113805966874561734 2025-01-10 21:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfg4gdvtzv2k 2025-01-10 21:39:21+00:00| seen|...

CVE-2024-54998

MonicaHQ v4.1.2 is affected by an authenticated Client-Side Injection vulnerability via the Reason parameter at the endpoint /people/h:[id]/debts/create. The issue is documented across multiple sources; the root cause is the insecure handling of the Reason parameter in this authenticated API path...

CVE-2024-54998

MonicaHQ v4.1.2 was discovered to contain an authenticated Client-Side Injection vulnerability via the Reason parameter at /people/h:id/debts/create...