Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-68951 EUVD-2026-68370GHSA-qx8p-4g5w-55fv

GROWI contains an incorrect authorization vulnerability. If this vulnerability is exploited, an unauthenticated attacker could retrieve the…

Published Aug 31, 2026 · Updated Aug 31, 2026 · Assigned by jpcert

Description

GROWI contains an incorrect authorization vulnerability. If this vulnerability is exploited, an unauthenticated attacker could retrieve the other user's bookmark data.

Affected products

VendorProductAffectedFixed
GROWI GROWI ≤ v8.0.0 —

References