CVE-2023-48200

2023-11-1523:15:09

Alpine Linux Development Team

security.alpinelinux.org

cross site scripting

arbitrary code execution

sensitive information

equipment component

unix

AI Score

6.9

Confidence

Low

EPSS

Percentile

9.9%

JSON

Cross Site Scripting vulnerability in Grocy v.4.0.3 allows a local attacker to execute arbitrary code and obtain sensitive information via the equipment description component within /equipment/ component.

OSVersionArchitecturePackageVersionFilename
Alpine3.19-communitynoarchgrocy= 4.0.3-r2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	3.19-community	noarch	grocy	= 4.0.3-r2	UNKNOWN