CVE-2023-48197 (published 2023-11-15T00:00:00)
Cross-Site Scripting (XSS) vulnerability in the ‘manageApiKeys’ component of Grocy 4.0.3 and earlier allows attackers to obtain victim's cookies when the victim clicks on the "see QR code" function.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a