CVE-2023-48200

Cross Site Scripting vulnerability in Grocy v.4.0.3 allows a local attacker to execute arbitrary code and obtain sensitive information via the equipment…

published November 15, 2023

CVSS
—
EPSS
1%
Percentile
55.1
In the wild
Unconfirmed
What it is

Cross Site Scripting vulnerability in Grocy v.4.0.3 allows a local attacker to execute arbitrary code and obtain sensitive information via the equipment description component within /equipment/ component.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00770 · 55.1th percentile
Published
2023-11-15T00:00Z
EPSS history
Timeline
  • 15 NOV 00:00Z
    Cross Site Scripting vulnerability in Grocy v.4.0.3 allows a local attacker to execute arbitrary code and obtain sensitive information via the equipment…
    cvelistv5