← All advisories

High severity8.8NVD Advisory· Published Sep 15, 2023· Updated Jun 17, 2026

CVE-2023-42270

CVE-2023-42270

Description

Grocy <= 4.0.2 is vulnerable to Cross Site Request Forgery (CSRF).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Grocy Project/Grocy2 versions
cpe:2.3:a:grocy_project:grocy:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:grocy_project:grocy:*:*:*:*:*:*:*:*range: <=4.0.2
- (no CPE)range: <=4.0.2

Patches

Vulnerability mechanics

References

2

xploit.sh/posts/cve-2023-xxxxx/nvdExploitThird Party Advisory
packetstormsecurity.com/files/176958/Grocy-4.0.2-Cross-Site-Request-Forgery.htmlnvd

News mentions

0

No linked articles in our index yet.