Security Advisory

CVE-2024-55074

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-01-06 00:00:00

Last updated 2025-01-06 20:50:19

Assigner mitre

State PUBLISHED

Description

The edit profile function of Grocy through 4.3.0 allows stored XSS and resultant privilege escalation by uploading a crafted HTML or SVG file, a different issue than CVE-2024-8370.

← Browse all CVEs View on cve.org ↗