PT-2023-16749
CVE-2023-1094
·
تاريخ النشر
2023-05-08
·
تاريخ التحديث
2023-05-12
الوصف من
CVSS 3.1
8.0
عاليةالمقاييسAV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
MonicaHQ version 4.0.0
Description
The issue allows an authenticated remote attacker to execute malicious code in the application via CSTI in the "people:id/food" endpoint and
food parameter.Recommendations
For MonicaHQ version 4.0.0, as a temporary workaround, consider disabling access to the "people:id/food" endpoint until a patch is available. Restrict the use of the
food parameter in this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾