Threat database

4 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.1	EPSS 0.3%	CVE-2024-27731friendica · n/a Medium6.1EPSS 0.3%2024-08-15CVE Database V5CVE-2024-27731 Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the lack of file type filtering in the file attachment parameter. EPSS 0.3%Vulnerability	CVE Database V5	2024-08-15
Critical	9.8	EPSS 0.8%	CVE-2024-27730friendica · n/a Critical9.8EPSS 0.8%2024-08-15CVE Database V5CVE-2024-27730 Insecure Permissions vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information and execute arbitrary code via the cid parameter of the calendar event feature. EPSS 0.8%Vulnerability	CVE Database V5	2024-08-15
High	7.4	EPSS 0.4%	CVE-2024-27729friendica · n/a High7.4EPSS 0.4%2024-08-15CVE Database V5CVE-2024-27729 Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the location parameter of the calendar event feature. EPSS 0.4%Vulnerability	CVE Database V5	2024-08-15
Medium	6.1	EPSS 0.3%	CVE-2024-27728friendica · n/a Medium6.1EPSS 0.3%2024-08-15CVE Database V5CVE-2024-27728 Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the text parameter of the babel debug feature. EPSS 0.3%Vulnerability	CVE Database V5	2024-08-15

Page 1 of 1