Description
Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the lack of file type filtering in the file attachment parameter.
Medium · 6.1
CVE-2024-27731
EUVD-2024-24925GHSA-gv29-jxwh-r2gm
Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the lack of file typ…
Published Aug 15, 2024 · Updated Aug 16, 2024 · Assigned by mitre