Vulnerability CVE-2023-48199
Published: 2023-11-15   Modified: 2023-11-16

Description:
An issue in Grocy v.4.0.3 allows a local attacker to execute arbitrary code and obtain sensitive information via the QR code funciton in the manageapikeys component.

 References:
https://github.com/grocy/grocy
https://grocy.info
https://nitipoom-jar.github.io/CVE-2023-48199/
Copyright 2026, cxsecurity.com

 

Back to Top