Grocy project vulnerabilities
3 published CVEs name Grocy project among the affected products.
- 3Published CVEs3 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2024-55076
Grocy through 4.3.0 has no CSRF protection, as demonstrated by changing the Administrator's password.
Grocy project · Grocy
High8.1 - CVE-2024-55075
Grocy through 4.3.0 allows remote attackers to obtain sensitive information via direct requests to pages that are not shown in the UI, such as calendar and…
Grocy project · Grocy
Medium4.3 - CVE-2024-55074
The edit profile function of Grocy through 4.3.0 allows stored XSS and resultant privilege escalation by uploading a crafted HTML or SVG file, a different…
Grocy project · Grocy
High8.8