CVE-2023-48199
Last modified
CVE-2023-48199 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. HTML Injection vulnerability in the 'manageApiKeys' component in Grocy <= 4.0.3 allows attackers to inject arbitrary HTML content without script execution. This occurs when user-supplied data is not appropriately sanitized, enabling the injection of HTML tags through parameter values. EPSS estimates a 0.50% chance of exploitation in the next 30 days.
Description
HTML Injection vulnerability in the 'manageApiKeys' component in Grocy <= 4.0.3 allows attackers to inject arbitrary HTML content without script execution. This occurs when user-supplied data is not appropriately sanitized, enabling the injection of HTML tags through parameter values. The attacker can then manipulate page content in the QR code detail popup, often coupled with social engineering tactics, exploiting both the trust of users and the application's lack of proper input handling.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Grocy Project | Grocy | 4.0.3 |
References
- https://grocy.infoProduct
- https://nitipoom-jar.github.io/CVE-2023-48199/Exploit, Third Party Advisory
- https://grocy.infoProduct
- https://nitipoom-jar.github.io/CVE-2023-48199/Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-48199?
How severe is CVE-2023-48199?
How do I fix CVE-2023-48199?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-4819The Shared Files WordPress plugin before 1.7.6 does not retu…6.1
- CVE-2023-48192An issue in TOTOlink A3700R v.9.1.2u.6134_B20201202 allows a…7.8
- CVE-2023-48193Insecure Permissions vulnerability in JumpServer GPLv3 v.3.8…9.8
- CVE-2023-48194Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and…9.8
- CVE-2023-48197Cross-Site Scripting (XSS) vulnerability in the ‘manageApiKe…5.4
- CVE-2023-48198A Cross-Site Scripting (XSS) vulnerability in the 'product d…5.4
- CVE-2023-4820The PowerPress Podcasting plugin by Blubrry WordPress plugin…5.4
- CVE-2023-48200Cross Site Scripting vulnerability in Grocy v.4.0.3 allows a…5.4
- CVE-2023-48201Cross Site Scripting (XSS) vulnerability in Sunlight CMS v.8…5.4
- CVE-2023-48202Cross-Site Scripting (XSS) vulnerability in Sunlight CMS 8.0…5.4
- CVE-2023-48204An issue in PublicCMS v.4.0.202302.e allows a remote attacke…6.5
- CVE-2023-48205Jorani Leave Management System 1.0.2 allows a remote attacke…5.3
Are you affected by CVE-2023-48199?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST