Vulnerability CVE-2023-48200
Published: 2023-11-15   Modified: 2023-11-16

Description:
Cross Site Scripting vulnerability in Grocy v.4.0.3 allows a local attacker to execute arbitrary code and obtain sensitive information via the equipment description component within /equipment/ component.

 References:
https://github.com/grocy/grocy
https://nitipoom-jar.github.io/CVE-2023-48200/
Copyright 2026, cxsecurity.com

 

Back to Top