← Database

CVE-2024-55076

HIGH CVSS: 8.1 Published: 2025-01-06 Modified: 2026-06-17

Description

Grocy through 4.3.0 has no CSRF protection, as demonstrated by changing the Administrator's password.

Affected Platforms

Grocy Project Grocy

Weakness Type

CWE-352

References