Cross-Site Scripting (XSS) vulnerability in the ‘manageApiKeys’ component of Grocy 4.0.3 and earlier allows attackers to obtain victim's cookies when the victim clicks on the "see QR code" function.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2023-11-15T00:00:00
Updated: 2024-08-02T21:23:39.182Z
Reserved: 2023-11-13T00:00:00
Link: CVE-2023-48197

No data.

Status : Modified
Published: 2023-11-15T23:15:08.903
Modified: 2024-11-21T08:31:11.990
Link: CVE-2023-48197

No data.