High · 7.4 CVE-2024-27729 EUVD-2024-24923GHSA-mr7q-fp6v-4rc6

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the location paramet…

Published Aug 15, 2024 · Updated Sep 3, 2024 · Assigned by mitre

Description

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the location parameter of the calendar event feature.

References

https://leo.oliver.nz/posts/2024/05/friendica-cve-disclosures/
https://github.com/friendica/friendica/pull/13927