Unrated
Grocy through 4.3.0 has no CSRF protection, as demonstrated by changing the Administrator's password.
CVE-2024-55076
First seen on SecPulse
References
- advisory github.com
- advisory nvd.nist.gov
- web m10x.de