Approved changes feed: RSS · Atom

cpe:2.3:a:friendica:friendica:2024.03:*:*:*:*:*:*:*

part: a version: 2024.03 update: *

VendorFriendica (c79dacfa-1aa4-56f4-a990-1f763f6ce961)
ProductFriendica (0b0097e7-5c93-541c-a1ed-d11e90fe9c0f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/friendica/friendica purl2cpe 2026-06-01 10:14:06.124644

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-39094 vulnerable 2026-06-08 06:41:48.730247 Details available
Friendica 2024.03 is vulnerable to Cross Site Scripting (XSS) in settings/profile via the homepage, xmpp, and matrix parameters.
Published: 2024-08-20T00:00:00.000Z
Updated: 2025-03-13T15:55:56.891Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.