Skip to content
OpenAdvisories

Vendor

growilabs

2 known vulnerabilities.

Products

growi 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-84205

    GROWI through 8.0.2 Authorization Bypass Through User-Controlled Key on apiv3 Revision Retrieval

    GROWI contains an access control vulnerability in the GET /_api/v3/revisions/:id endpoint that validates access against a query parameter but returns the revision identified by the path parameter without confirming they reference the same page. Authenticated …

    growilabs growi
  • Medium 6.5
    CVE-2026-84204

    GROWI through 8.0.2 Missing Authorization on apiv3 Attachment Retrieval

    GROWI contains an access control vulnerability in the GET /_api/v3/attachment/:id endpoint that fails to validate page access permissions. Authenticated attackers can retrieve attachment metadata from pages they cannot view by supplying known attachment ident…

    growilabs growi