Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
Grocy ProjectGrocy

3 matches found

CVE
CVE•added 2025/01/06 8:15 p.m.•36 views

CVE-2024-55074

The edit profile function of Grocy through 4.3.0 allows stored XSS and resultant privilege escalation by uploading a crafted HTML or SVG file, a different issue than CVE-2024-8370.

8.8CVSS6.2AI score0.00063EPSS
CVE
CVE•added 2025/01/06 9:15 p.m.•34 views

CVE-2024-55076

Grocy through 4.3.0 has no CSRF protection, as demonstrated by changing the Administrator's password.

8.1CVSS7.1AI score0.00012EPSS
CVE
CVE•added 2023/09/15 2:15 p.m.•28 views

CVE-2023-42270

Grocy

8.8CVSS8.7AI score0.00159EPSS