CVE-2024-54998

MonicaHQ v4.1.2 was discovered to contain an authenticated Client-Side Injection vulnerability via the Reason parameter at /people/h:id/debts/create...

CVE-2024-54998

MonicaHQ v4.1.2 was discovered to contain an authenticated Client-Side Injection vulnerability via the Reason parameter at /people/h:id/debts/create...

CVE-2024-54998

creationtimestamp| type| source ---|---|--- 2025-01-10 20:34:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113805966874561734 2025-01-10 21:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfg4gdvtzv2k 2025-01-10 21:39:21+00:00| seen|...

CVE-2024-54998

MonicaHQ v4.1.2 was discovered to contain an authenticated Client-Side Injection vulnerability via the Reason parameter at /people/h:id/debts/create...

CVE-2024-54998

MonicaHQ version v4.1.2 is susceptible to an authenticated Client-Side Injection vulnerability (CWE-79). The flaw exists in the Reason parameter at the /people/h:[id]/debts/create API endpoint, allowing for improper neutralization of input during web page generation. As a workaround, it is recomm...