Monica Security Vulnerabilities and Issues — Monica CVE List

Lucene search

MonicahqMonica

3 matches found

CVE•added 2025/01/10 9:15 p.m.•36 views

CVE-2024-54996

MonicaHQ v4.1.2 was discovered to contain multiple authenticated Client-Side Injection vulnerabilities via the title and description parameters at /people/ID/reminders/create.

8.8CVSS7.8AI score0.0005EPSS

CVE•added 2023/05/08 8:15 p.m.•32 views

CVE-2023-1094

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the people:id/food endpoint and food parameter.

8.8CVSS8.6AI score0.00654EPSS

CVE•added 2023/05/08 8:15 p.m.•25 views

CVE-2023-1031

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the settings endpoint and first_name parameter.

8.8CVSS8.6AI score0.00887EPSS