Unrated

The edit profile function of Grocy through 4.3.0 allows stored XSS and resultant privilege escalation by uploading a crafted HTML or SVG file, a diffe...

CVE-2024-55074 First seen on SecPulse Jan 6, 2025

Original description The description as published by the source.

The edit profile function of Grocy through 4.3.0 allows stored XSS and resultant privilege escalation by uploading a crafted HTML or SVG file, a different issue than CVE-2024-8370.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web m10x.de

Key facts

Severity: Unrated
Published: Jan 6, 2025
First seen on SecPulse: Jan 6, 2025
CWE: CWE-79

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:04