2 matches found
CVE-2023-30787
MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the people:id/introductions endpoint and firstmetadditionalinfo parameter...
5.4CVSS5.7AI score0.00643EPSS
SaveExploits1References2
Code injection
MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the people:id/introductions endpoint and firstmetadditionalinfo parameter...
4.9CVSS5.8AI score0.00643EPSS
SaveExploits1References2Affected Software1
20