Grocy Project vulnerabilities

Products

• Grocy 11

Newest

• grocy project grocy Grocy through 4.3.0 has no CSRF protection, as demonstrated by changing the Administrator's... CVE-2024-55076 8.1 HighJanuary 6, 2025
• grocy project grocy Grocy through 4.3.0 allows remote attackers to obtain sensitive information via direct requests... CVE-2024-55075 4.3 MediumJanuary 6, 2025
• grocy project grocy The edit profile function of Grocy through 4.3.0 allows stored XSS and resultant privilege... CVE-2024-55074 8.8 HighJanuary 6, 2025
• grocy project grocy Grocy SVG File Upload recipepictures cross site scripting CVE-2024-8370 Disputed 5.3 MediumSeptember 1, 2024
• grocy project grocy A Cross-Site Scripting (XSS) vulnerability in the recipe preparation component within /api... CVE-2023-48866 5.4 MediumDecember 4, 2023
• grocy project grocy Cross Site Scripting vulnerability in Grocy v.4.0.3 allows a local attacker to execute arbitrary... CVE-2023-48200 5.4 MediumNovember 15, 2023
• grocy project grocy An issue in Grocy v.4.0.3 allows a local attacker to execute arbitrary code and obtain sensitive... CVE-2023-48199 7.8 HighNovember 15, 2023
• grocy project grocy Cross Site Scripting vulnerability in Grocy v.4.0.3 allows a local attacker to execute arbitrary... CVE-2023-48198 5.4 MediumNovember 15, 2023
• grocy project grocy Cross Site Scripting vulnerability in Grocy v.4.0.3 allows a local attacker to execute arbitrary... CVE-2023-48197 5.4 MediumNovember 15, 2023
• grocy project grocy Grocy <= 4.0.2 is vulnerable to Cross Site Request Forgery (CSRF). CVE-2023-42270 8.8 HighSeptember 15, 2023
• grocy project grocy Cross-site Scripting (XSS) vulnerability in grocy 2.7.1 via the add recipe module, which gets... CVE-2020-25454 5.4 MediumNovember 18, 2020