Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2023-48866 PoC — Grocy 安全漏洞

Source
https://github.com/nitipoom-jar/CVE-2023-48866
Associated Vulnerability
Title:Grocy 安全漏洞 (CVE-2023-48866)
Description:A Cross-Site Scripting (XSS) vulnerability in the recipe preparation component within /api/objects/recipes and note component within /api/objects/shopping_lists/ of Grocy <= 4.0.3 allows attackers to obtain the victim's cookies.
File Snapshot

 [4.0K]  /data/pocs/6de682e73a717ca2b32c906795719309678c8a3f
├── [3.2M]  1.gif
├── [109K]  1.png
├── [876K]  2.gif
├── [142K]  2.png
├── [866K]  3.gif
├── [180K]  4.png
├── [5.3K]  index.html
└── [ 11K]  styles.css

0 directories, 8 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →