3 matches found
CVE-2024-27731
Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the lack of file type filtering in the file attachment parameter...
6.1AI score0.00316EPSS
SaveExploits1References2
CVE-2024-27731
Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the lack of file type filtering in the file attachment parameter...
0.00316EPSS
SaveExploits1References2
CVE-2024-27731
CVE-2024-27731 is a Cross Site Scripting vulnerability in Friendica v2023.12. The issue stems from the lack of file type filtering in the file attachment parameter, which could allow a remote attacker to obtain sensitive information. The available documents consistently describe the affected soft...
6.1CVSS6.2AI score0.00316EPSS
SaveExploits1References2Affected Software1
20