CVE-2023-48866

概要

参考情報

• grocy/grocy · Product
• nitipoom-jar.github.io/CVE-2023-48866 · Third Party Advisory
• nitipoom-jaroonchaipipat.github.io/security-research-portal/2023-48866

grocy のその他の脆弱性

• CVE-2024-55076高 8.1Grocy through 4.3.0 has no CSRF protection, as demonstrated by changing the Administrator's password.
• CVE-2024-55075中 5.3Grocy through 4.3.0 allows remote attackers to obtain sensitive information via direct requests to pages that are not shown in the UI, such …
• CVE-2024-55074緊急 9.0The edit profile function of Grocy through 4.3.0 allows stored XSS and resultant privilege escalation by uploading a crafted HTML or SVG fil…
• CVE-2024-8370中 5.4A vulnerability classified as problematic was found in Grocy up to 4.2.0. This vulnerability affects unknown code of the file /api/files/rec…
• CVE-2023-48200中 5.4Cross Site Scripting vulnerability in Grocy v.4.0.3 allows a local attacker to execute arbitrary code and obtain sensitive information via t…