Description Grocy <= 4.0.2 is vulnerable to Cross Site Request Forgery (CSRF). References http://xploit.sh/posts/cve-2023-xxxxx/ http://packetstormsecurity.com/files/176958/Grocy-4.0.2-Cross-Site-Request-Forgery.html