CVE-2024-55074

🗓️ 06 Jan 2025 00:00:00Reported by mitreType

Stored XSS vulnerability in Grocy edit profile function, allowing privilege escalation via crafted files.

Reporter	Title	Published	Views	Family All 8
NVD	CVE-2024-55074	6 Jan 202520:15	–	nvd
NVD	CVE-2024-8370	1 Sep 202422:15	–	nvd
Cvelist	CVE-2024-55074	6 Jan 202500:00	–	cvelist
Cvelist	CVE-2024-8370 Grocy SVG File Upload recipepictures cross site scripting	1 Sep 202422:00	–	cvelist
CVE	CVE-2024-55074	6 Jan 202520:15	–	cve
CVE	CVE-2024-8370	1 Sep 202422:15	–	cve
AlpineLinux	CVE-2024-8370	1 Sep 202422:15	–	alpinelinux
Vulnrichment	CVE-2024-8370 Grocy SVG File Upload recipepictures cross site scripting	1 Sep 202422:00	–	vulnrichment

Source	Link
m10x	www.m10x.de/posts/2024/11/all-your-recipe-are-belong-to-us-part-1/3-stored-xss-csrf-and-broken-access-control-vulnerabilities-in-grocy/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Jan 2025 00:00Current

6Medium risk

Vulners AI Score6

CVSS38.8

EPSS0.0004

SSVC

CWE-79