2 matches found
Code injection
MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the people:id/introductions endpoint and firstmetadditionalinfo parameter...
4.9CVSS5.8AI score0.00643EPSS
SaveExploits1References2Affected Software1
CVE-2023-30787: Improper Neutralization of Input During Web Page Generation
MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the people:id/introductions endpoint and firstmetadditionalinfo parameter...
5.4CVSS6.1AI score0.00643EPSS
SaveExploits1References3
20