CVE-2024-55076
Grocy through 4.3.0 has no CSRF protection, as demonstrated by changing the Administrator's password.
Published: 2025-01-06 · CVSS: 8.1 · CVSS 3.1
Grocy through 4.3.0 has no CSRF protection, as demonstrated by changing the Administrator's password.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7