CVE-2023-50465

Summary

CVE-2023-50465 is a stored cross-site scripting (XSS) vulnerability affecting Monica (MonicaHQ) version 4.0.0. Authenticated users can exploit this issue by uploading malicious SVG documents. Successful exploitation allows attackers to inject and execute malicious scripts in the context of the target user, potentially leading to unauthorized actions or data theft. This vulnerability poses a significant risk and requires immediate attention and patching from Monica users.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.