Unrated

Grocy through 4.3.0 allows remote attackers to obtain sensitive information via direct requests to pages that are not shown in the UI, such as calenda...

CVE-2024-55075 First seen on SecPulse Jan 6, 2025

Original description The description as published by the source.

Grocy through 4.3.0 allows remote attackers to obtain sensitive information via direct requests to pages that are not shown in the UI, such as calendar and recipes.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web m10x.de

Key facts

Severity: Unrated
Published: Jan 6, 2025
First seen on SecPulse: Jan 6, 2025
CWE: CWE-425

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:04