Unscored CVE-2018-0698 EUVD-2018-1508GHSA-w79q-529c-v5v9

Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecifi…

Published Jan 9, 2019 · Updated Aug 5, 2024 · Assigned by jpcert

Description

Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
WESEEK	GROWI	v3.2.3 and earlier	—

References

JVN#96493183 third-party-advisory
https://weseek.co.jp/security/2018/12/25/growi-prevent-xss2/