Non évaluée

The edit profile function of Grocy through 4.3.0 allows stored XSS and resultant privilege escalation by uploading a crafted HTML or SVG file, a diffe...

CVE-2024-55074 Première détection SecPulse Jan 6, 2025

Description d'origine La description telle que publiée par la source (souvent en anglais).

The edit profile function of Grocy through 4.3.0 allows stored XSS and resultant privilege escalation by uploading a crafted HTML or SVG file, a different issue than CVE-2024-8370.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
web m10x.de

Faits clés

Gravité: Non évaluée
Publication: Jan 6, 2025
Première détection SecPulse: Jan 6, 2025
CWE: CWE-79

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:04