Security Advisory

CVE-2024-27731

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-08-15 00:00:00
Last updated 2024-08-16 17:19:12
Assigner mitre
State PUBLISHED

Description

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the lack of file type filtering in the file attachment parameter.