PoC Index85,100 CVEs with PoCs

CVE-2024-55074

CRITICAL 9.0EPSS 0.7%

The edit profile function of Grocy through 4.3.0 allows stored XSS and resultant privilege escalation by uploading a crafted HTML or SVG file, a different issue than CVE-2024-8370.

Affected
Grocy project · Grocy
CVSS v3.1 NVD
9.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS v3.1 MITRE
8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.67% chance of exploitation in the next 30 days, 51st percentile
Published
2025-01-06

Proof-of-concept exploits (1)

Security advisories

References