GCVE - cpe:2.3:a:monicahq:monica:4.0.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:monicahq:monica:4.0.0:*:*:*:*:*:*:*

part: a version: 4.0.0 update: *

Vendor	Monicahq (`41147f40-bc54-55d0-8c20-327cf6c32245`)
Product	Monica (`e7a70aae-8711-507d-bfa1-49cd95ed93a8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:docker/monica`	purl2cpe	2026-06-01 10:12:52.467831
`pkg:github/monicahq/monica`	purl2cpe	2026-06-01 10:12:52.467832

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-30790`	vulnerable	2026-06-08 06:04:41.150408	Details available MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `people:id/relationships` endpoint and first_name and last_name parameter. Published: 2023-05-08T00:00:00.000Z Updated: 2025-02-03T19:59:00.510Z Open on db.gcve.eu Reference links https://fluidattacks.com/advisories/napoli https://www.monicahq.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-30789`	vulnerable	2026-06-08 06:04:41.149878	Details available MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `people:id/work` endpoint and job and company parameter. Published: 2023-05-08T00:00:00.000Z Updated: 2025-02-03T19:55:01.931Z Open on db.gcve.eu Reference links https://fluidattacks.com/advisories/napoli https://www.monicahq.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-30788`	vulnerable	2026-06-08 06:04:41.149429	Details available MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `people/add` endpoint and nickName, description, lastName, middleName and firstName parameter. Published: 2023-05-08T00:00:00.000Z Updated: 2025-02-04T19:11:04.109Z Open on db.gcve.eu Reference links https://fluidattacks.com/advisories/napoli https://www.monicahq.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-30787`	vulnerable	2026-06-08 06:04:41.148867	Details available MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `people:id/introductions` endpoint and first_met_additional_info parameter. Published: 2023-05-08T00:00:00.000Z Updated: 2025-02-03T19:05:57.976Z Open on db.gcve.eu Reference links https://fluidattacks.com/advisories/napoli https://www.monicahq.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1094`	vulnerable	2026-06-08 05:52:33.821373	Details available MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `people:id/food` endpoint and food parameter. Published: 2023-05-08T00:00:00.000Z Updated: 2025-01-29T16:18:42.852Z Open on db.gcve.eu Reference links https://fluidattacks.com/advisories/napoli https://www.monicahq.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1031`	vulnerable	2026-06-08 05:52:33.667646	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.