medium6.1
CVE-2024-27731
Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the lack of file type filtering in the f…
Impact
Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the lack of file type filtering in the file attachment parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Friendica | Friendica | Version 2023.12 |