CVE-2023-48198

Mô tả

Tham khảo

• grocy/grocy · Product
• nitipoom-jar.github.io/CVE-2023-48198 · Exploit
• nitipoom-jaroonchaipipat.github.io/security-research-portal/2023-48198

Lỗ hổng khác của grocy

• CVE-2024-55076CAO 8.1Grocy through 4.3.0 has no CSRF protection, as demonstrated by changing the Administrator's password.
• CVE-2024-55075TRUNG BÌNH 5.3Grocy through 4.3.0 allows remote attackers to obtain sensitive information via direct requests to pages that are not shown in the UI, such …
• CVE-2024-55074NGHIÊM TRỌNG 9.0The edit profile function of Grocy through 4.3.0 allows stored XSS and resultant privilege escalation by uploading a crafted HTML or SVG fil…
• CVE-2024-8370TRUNG BÌNH 5.4A vulnerability classified as problematic was found in Grocy up to 4.2.0. This vulnerability affects unknown code of the file /api/files/rec…
• CVE-2023-48866TRUNG BÌNH 5.4A Cross-Site Scripting (XSS) vulnerability in the recipe preparation component within /api/objects/recipes and note component within /api/ob…