Description
GROWI contains a missing authorization check vulnerability in its collaborative editing feature. By exploiting this vulnerability, a user with read-only permission, including a guest user, or a user in pending, suspended, or invited status may modify page drafts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GROWI | GROWI | v7.0.0 – ≤ v8.0.6 | — |