grocy project grocy vulnerabilities and exploits

(subscribe to this query)

8.8

CVSSv3

Grocy <= 4.0.2 is vulnerable to Cross Site Request Forgery (CSRF).

Grocy Project Grocy

5.4

CVSSv3

A Cross-Site Scripting (XSS) vulnerability in the recipe preparation component within /api/objects/recipes and note component within /api/objects/shopping_lists/ of Grocy <= 4.0.3 allows malicious users to obtain the victim's cookies.

Grocy Project Grocy

5.4

CVSSv3

Cross-Site Scripting (XSS) vulnerability in the ‘manageApiKeys’ component of Grocy 4.0.3 and previous versions allows malicious users to obtain victim's cookies when the victim clicks on the "see QR code" function.

Grocy Project Grocy 4.0.3

5.4

CVSSv3

A Cross-Site Scripting (XSS) vulnerability in the 'product description' component within '/api/stock/products' of Grocy version <= 4.0.3 allows malicious users to obtain a victim's cookies.

Grocy Project Grocy 4.0.3

7.8

CVSSv3

HTML Injection vulnerability in the 'manageApiKeys' component in Grocy <= 4.0.3 allows malicious users to inject arbitrary HTML content without script execution. This occurs when user-supplied data is not appropriately sanitized, enabling the injection of HTML tags t...

Grocy Project Grocy 4.0.3

5.4

CVSSv3

Cross Site Scripting vulnerability in Grocy v.4.0.3 allows a local malicious user to execute arbitrary code and obtain sensitive information via the equipment description component within /equipment/ component.

Grocy Project Grocy 4.0.3

5.4

CVSSv3

Cross-site Scripting (XSS) vulnerability in grocy 2.7.1 via the add recipe module, which gets executed when deleting the recipe.

Grocy Project Grocy 2.7.1

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook