Description (CNA)
Cross-Site Scripting (XSS) vulnerability in the ‘manageApiKeys’ component of Grocy 4.0.3 and earlier allows attackers to obtain victim's cookies when the victim clicks on the "see QR code" function.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/grocy/grocy
- https://nitipoom-jar.github.io/CVE-2023-48197/
- https://nitipoom-jaroonchaipipat.github.io/security-research-portal/2023-48197
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.