CVE-2023-48197

概要

参考情報

• grocy/grocy · Product
• nitipoom-jar.github.io/CVE-2023-48197 · Exploit
• nitipoom-jaroonchaipipat.github.io/security-research-portal/2023-48197

grocy のその他の脆弱性

• CVE-2024-55076高 8.1Grocy through 4.3.0 has no CSRF protection, as demonstrated by changing the Administrator's password.
• CVE-2024-55075中 5.3Grocy through 4.3.0 allows remote attackers to obtain sensitive information via direct requests to pages that are not shown in the UI, such …
• CVE-2024-55074緊急 9.0The edit profile function of Grocy through 4.3.0 allows stored XSS and resultant privilege escalation by uploading a crafted HTML or SVG fil…
• CVE-2024-8370中 5.4A vulnerability classified as problematic was found in Grocy up to 4.2.0. This vulnerability affects unknown code of the file /api/files/rec…
• CVE-2023-48866中 5.4A Cross-Site Scripting (XSS) vulnerability in the recipe preparation component within /api/objects/recipes and note component within /api/ob…