Description
Grocy through 4.3.0 allows remote attackers to obtain sensitive information via direct requests to pages that are not shown in the UI, such as calendar and recipes.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Grocy project | Grocy | ≤ 4.3.0 | — |