Description
Grocy through 4.3.0 has no CSRF protection, as demonstrated by changing the Administrator's password.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Grocy project | Grocy | ≤ 4.3.0 | — |
High · 8.1
CVE-2024-55076
EUVD-2024-52734GHSA-x3hv-xrrp-rmx2
Grocy through 4.3.0 has no CSRF protection, as demonstrated by changing the Administrator's password.
Published Jan 6, 2025 · Updated Jan 6, 2025 · Assigned by mitre