CVE-2024-27731

Name of the Vulnerable Software and Affected Versions Friendica version 2023.12

Description The issue allows a remote attacker to obtain sensitive information via the lack of file type filtering in the file attachment parameter. This is a Cross Site Scripting issue.

Recommendations For Friendica version 2023.12, consider restricting the file types that can be attached to prevent exploitation until a patch is available. As a temporary workaround, disabling the file attachment feature can help minimize the risk of sensitive information being obtained.