Vulnerability CVE-2023-48197

Vulnerability CVE-2023-48197

Published: 2023-11-15 Modified: 2023-11-16

Description:

Cross Site Scripting vulnerability in Grocy v.4.0.3 allows a local attacker to execute arbitrary code and obtain sensitive information via the QR code function in the manageapikeys component.

References:

https://github.com/grocy/grocy

https://nitipoom-jar.github.io/CVE-2023-48197/

Copyright 2026, cxsecurity.com