CVE-2023-50332

2023-12-2607:21:24

jpcert

www.cve.org

cve-2023-50332

user management

growi

vulnerability

0.0005 Low

EPSS

Percentile

18.0%

JSON

Improper authorization vulnerability exists in the User Management (/admin/users) page of GROWI versions prior to v6.0.6. If this vulnerability is exploited, a user may delete or suspend its own account without the user’s intention.

CNA Affected

[
  {
    "vendor": "WESEEK, Inc.",
    "product": "GROWI",
    "versions": [
      {
        "version": "prior to v6.0.6",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN18715935/

weseek.co.jp/ja/news/2023/11/21/growi-prevent-xss6/

0.0005 Low

EPSS

Percentile

18.0%

JSON

Related for CVELIST:CVE-2023-50332