VULNERABILITY INTELLIGENCE

CVE-2023-30789

CVSS score5.4 MEDIUM

EPSS probability0.67%

CISA KEVNot currently listed

Published2023-05-08

Last modified2026-06-17

Description

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `people:id/work` endpoint and job and company parameter.