CVE-2023-48198

2023-11-1500:00:00

mitre

www.cve.org

cross-site scripting

api

grocy

cve-2023-48198

EPSS

Percentile

14.0%

JSON

A Cross-Site Scripting (XSS) vulnerability in the ‘product description’ component within ‘/api/stock/products’ of Grocy version <= 4.0.3 allows attackers to obtain a victim’s cookies.

References

github.com/grocy/grocy

nitipoom-jar.github.io/CVE-2023-48198

EPSS

Percentile

14.0%

JSON

Related for CVELIST:CVE-2023-48198