CVE-2024-55076

Summary

CVE-2024-55076 is a vulnerability affecting the Grocy application up to version 4.3.0. This issue allows an unauthorized user to change the administrator's password through Cross-Site Request Forgery (CSRF) attacks. As a result, an attacker can gain access to the administrative interface, potentially causing significant damage or data theft. Grocy fails to implement CSRF protection, making it an easy target for such attacks. Organizations and individuals using the affected version of Grocy are strongly advised to update to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.