Unscored CVE-2019-5969 EUVD-2019-15537GHSA-r2g7-3vf5-29cp

Open redirect vulnerability in GROWI v3.4.6 and earlier allows remote attackersto redirect users to arbitrary web sites and conduct phishin…

Published Jul 5, 2019 · Updated Aug 4, 2024 · Assigned by jpcert

Description

Open redirect vulnerability in GROWI v3.4.6 and earlier allows remote attackersto redirect users to arbitrary web sites and conduct phishing attacks via the process of login.

Affected products

Vendor	Product	Affected	Fixed
WESEEK	GROWI	v3.4.6 and earlier	—

References

https://weseek.co.jp/security/2019/06/04/growi-fix-jvn84876282/
https://jvn.jp/en/jp/JVN84876282/index.html