Skip to contentGrocy Project Grocy vulnerabilities
- grocy project grocyGrocy through 4.3.0 has no CSRF protection, as demonstrated by changing the Administrator's...CVE-2024-550768.1 High
- grocy project grocyGrocy through 4.3.0 allows remote attackers to obtain sensitive information via direct requests...CVE-2024-550754.3 Medium
- grocy project grocyThe edit profile function of Grocy through 4.3.0 allows stored XSS and resultant privilege...CVE-2024-550748.8 High
- grocy project grocyGrocy SVG File Upload recipepictures cross site scriptingCVE-2024-8370Disputed5.3 Medium
- grocy project grocyA Cross-Site Scripting (XSS) vulnerability in the recipe preparation component within /api...CVE-2023-488665.4 Medium
- grocy project grocyCross Site Scripting vulnerability in Grocy v.4.0.3 allows a local attacker to execute arbitrary...CVE-2023-482005.4 Medium
- grocy project grocyAn issue in Grocy v.4.0.3 allows a local attacker to execute arbitrary code and obtain sensitive...CVE-2023-481997.8 High
- grocy project grocyCross Site Scripting vulnerability in Grocy v.4.0.3 allows a local attacker to execute arbitrary...CVE-2023-481985.4 Medium
- grocy project grocyCross Site Scripting vulnerability in Grocy v.4.0.3 allows a local attacker to execute arbitrary...CVE-2023-481975.4 Medium
- grocy project grocyGrocy <= 4.0.2 is vulnerable to Cross Site Request Forgery (CSRF).CVE-2023-422708.8 High
- grocy project grocyCross-site Scripting (XSS) vulnerability in grocy 2.7.1 via the add recipe module, which gets...CVE-2020-254545.4 Medium