Lucene search

K
cvelistMitreCVELIST:CVE-2023-48197
HistoryNov 15, 2023 - 12:00 a.m.

CVE-2023-48197

2023-11-1500:00:00
mitre
www.cve.org
2
grocy
4.0.3
xss
vulnerability
manageapikeys
cookie theft

EPSS

0

Percentile

14.0%

Cross-Site Scripting (XSS) vulnerability in the ‘manageApiKeys’ component of Grocy 4.0.3 and earlier allows attackers to obtain victim’s cookies when the victim clicks on the “see QR code” function.

EPSS

0

Percentile

14.0%

Related for CVELIST:CVE-2023-48197