CVE-2023-1031

n/a / MonicaHQ PUBLISHED

Description (CNA)

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `settings` endpoint and first_name parameter.

Affected (CNA)

Vendor / product	Versions
n/a / MonicaHQ	affected 4.0.0

CWE

No CWE identifiers supplied.

References

https://fluidattacks.com/advisories/napoli
https://www.monicahq.com/

ADP enrichment

CVE

No English description supplied.

https://fluidattacks.com/advisories/napoli
https://www.monicahq.com/

CISA-ADP

No English description supplied.

No references supplied.