Vulnerability CVE-2023-1031
Published: 2023-05-08

Description:
MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `settings` endpoint and first_name parameter.

 References:
https://www.monicahq.com/
https://fluidattacks.com/advisories/napoli
Copyright 2026, cxsecurity.com

 

Back to Top