5.4
Moyenne
CVE-2023-30790 MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI…
Description
MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `people:id/relationships` endpoint and first_name and last_name parameter.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| MonicaHQ | 4.0.0 | Pas de correctif indiqué |
Autres CVE de MonicaHQ
Les 6 CVE de MonicaHQ →
CVE-2023-1031
MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI…
8.8
Élevée
CVE-2023-1094
MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI…
8.0
Élevée
CVE-2023-30787
MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI…
5.4
Moyenne
CVE-2023-30788
MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI…
5.4
Moyenne