CVE-2024-27730: Friendica

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Insecure Permissions vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information and execute arbitrary code via the cid parameter of the calendar event feature.

Affected products

• Friendica Friendica: version 2023.12 only

Published 2024-08-15. Last modified 2026-06-17.