Unscored CVE-2019-5968 EUVD-2019-15536GHSA-6m9j-rg23-c25r

Cross-site request forgery (CSRF) vulnerability in GROWI v3.4.6 and earlier allows remote attackers to hijack the authentication of adminis…

Published Jul 5, 2019 · Updated Aug 4, 2024 · Assigned by jpcert

Description

Cross-site request forgery (CSRF) vulnerability in GROWI v3.4.6 and earlier allows remote attackers to hijack the authentication of administrators via updating user's 'Basic Info'.

Affected products

Vendor	Product	Affected	Fixed
WESEEK	GROWI	v3.4.6 and earlier	—

References

https://weseek.co.jp/security/2019/06/04/growi-fix-jvn84876282/
https://jvn.jp/en/jp/JVN84876282/index.html