Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rf3j-fpf7-94x7

Опубликовано: 15 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Bernd Bestel grocy v4.6.0 was discovered to contain a SQL injection vulnerability in the product-group parameter at /stockreports/spendings. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement.

Bernd Bestel grocy v4.6.0 was discovered to contain a SQL injection vulnerability in the product-group parameter at /stockreports/spendings. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement.

EPSS

Процентиль: 24%
0.00321
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 9.8
nvd
около 2 месяцев назад

Bernd Bestel grocy v4.6.0 was discovered to contain a SQL injection vulnerability in the product-group parameter at /stockreports/spendings. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement.

CVSS3: 9.8
debian
около 2 месяцев назад

Bernd Bestel grocy v4.6.0 was discovered to contain a SQL injection vu ...

EPSS

Процентиль: 24%
0.00321
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89