Security Advisory
CVE-2023-48197
5.4
MEDIUM
Vulnerability Description
Cross-Site Scripting (XSS) vulnerability in the ‘manageApiKeys’ component of Grocy 4.0.3 and earlier allows attackers to obtain victim's cookies when the victim clicks on the "see QR code" function.
Published Date
November 15, 2023
Official Source
NIST NVD Advisory