Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wrgj-xmqp-rp35

Опубликовано: 04 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

A Cross-Site Scripting (XSS) vulnerability in the recipe preparation component within /api/objects/recipes and note component within /api/objects/shopping_lists/ of Grocy <= 4.0.3 allows attackers to obtain the victim's cookies.

A Cross-Site Scripting (XSS) vulnerability in the recipe preparation component within /api/objects/recipes and note component within /api/objects/shopping_lists/ of Grocy <= 4.0.3 allows attackers to obtain the victim's cookies.

EPSS

Процентиль: 56%
0.00339
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
около 2 лет назад

A Cross-Site Scripting (XSS) vulnerability in the recipe preparation component within /api/objects/recipes and note component within /api/objects/shopping_lists/ of Grocy <= 4.0.3 allows attackers to obtain the victim's cookies.

CVSS3: 5.4
debian
около 2 лет назад

A Cross-Site Scripting (XSS) vulnerability in the recipe preparation c ...

EPSS

Процентиль: 56%
0.00339
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79