Vendor
GROWI
15 known vulnerabilities.
Products
11 results · Clear filters · Feed
-
Medium 5.3
GROWI contains a missing authorization check vulnerability in its collaborative editing feature. By exploiting this vul…
-
Medium 4.2
GROWI contains an authorization bypass vulnerability in its tag update API and the page update API due to improper use …
-
Medium 4.2
GROWI contains an authorization bypass vulnerability in its page viewing and commenting functionality due to improper u…
-
Medium 5.3
An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contain…
-
Medium 6.3
GROWI contains a vulnerability with an authorization bypass through user-controlled key in the bookmark folder APIs. If…
-
Medium 5.3
GROWI contains an incorrect authorization vulnerability. If this vulnerability is exploited, an unauthenticated attacke…
-
Medium 5.4
Stored cross-site scripting vulnerability exists in GROWI v7.4.6 and earlier. If this vulnerability is exploited, an ar…
-
Medium 4.3
Cross-site request forgery vulnerability exists in GROWI v7.3.3 and earlier. If a user views a malicious page while log…
-
Medium 5.4
Cross-site scripting vulnerability exists in GROWI prior to v7.2.10. If a malicious user creates a page containing craf…
-
Medium 6.1
GROWI v4.2.7 and earlier contains a cross-site scripting vulnerability in the page alert function. If a user accesses a…
-
Medium 4.3
Inefficient regular expression complexity issue exists in GROWI prior to v7.1.6. If exploited, a logged-in user may cau…