CVE-2024-27731

A Cross Site Scripting (XSS) vulnerability exists in Friendica v.2023.12 due to a lack of file type filtering in the file attachment parameter . This flaw allows a remote attacker to obtain sensitive information . To mitigate this risk, it is recommended to restrict the types of files that can be...

CVE-2024-27731

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the lack of file type filtering in the file attachment parameter...

CVE-2024-27731

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the lack of file type filtering in the file attachment parameter...

CVE-2024-27731

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the lack of file type filtering in the file attachment parameter...