CVE-2024-55075

概要

参考情報

• m10x.de/posts/2024/11/all-your-recipe-are-belong-to-us-part-1/3-stored-xss-csrf-and-broken-access-control-vulnerabilities-in-grocy · Exploit

grocy のその他の脆弱性

• CVE-2024-55076高 8.1Grocy through 4.3.0 has no CSRF protection, as demonstrated by changing the Administrator's password.
• CVE-2024-55074緊急 9.0The edit profile function of Grocy through 4.3.0 allows stored XSS and resultant privilege escalation by uploading a crafted HTML or SVG fil…
• CVE-2024-8370中 5.4A vulnerability classified as problematic was found in Grocy up to 4.2.0. This vulnerability affects unknown code of the file /api/files/rec…
• CVE-2023-48866中 5.4A Cross-Site Scripting (XSS) vulnerability in the recipe preparation component within /api/objects/recipes and note component within /api/ob…
• CVE-2023-48200中 5.4Cross Site Scripting vulnerability in Grocy v.4.0.3 allows a local attacker to execute arbitrary code and obtain sensitive information via t…