Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2023-48197
HistoryNov 15, 2023 - 11:15 p.m.

CVE-2023-48197

2023-11-1523:15:08
Alpine Linux Development Team
security.alpinelinux.org
5
cve-2023-48197
cross-site scripting
grocy
cookies
qr code
unix

EPSS

0

Percentile

14.0%

Cross-Site Scripting (XSS) vulnerability in the ‘manageApiKeys’ component of Grocy 4.0.3 and earlier allows attackers to obtain victim’s cookies when the victim clicks on the “see QR code” function.

OSVersionArchitecturePackageVersionFilename
Alpine3.19-communitynoarchgrocy= 4.0.3-r2UNKNOWN

EPSS

0

Percentile

14.0%

Related for ALPINE:CVE-2023-48197