Lucene search
HistoryDec 26, 2023 - 8:15 a.m.
CVE-2023-50332
cve-2023-50332; improper authorization; user management; growi; vulnerability
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
0.0005 Low
EPSS
Percentile
18.0%
Improper authorization vulnerability exists in the User Management (/admin/users) page of GROWI versions prior to v6.0.6. If this vulnerability is exploited, a user may delete or suspend its own account without the user’s intention.
Affected configurations
Node
weseekgrowiRange<6.0.6
Related
cvelist
cvelist
CVE-2023-50332
2023-12-26 07:21:24
prion
prion
Authorization
2023-12-26 08:15:00
osv
osv
CVE-2023-50332
2023-12-26 08:15:11
cve
cve
CVE-2023-50332
2023-12-26 08:15:11
jvn
jvn
JVN#18715935: Multiple vulnerabilities in GROWI
2023-12-13 00:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
0.0005 Low
EPSS
Percentile
18.0%
Related for NVD:CVE-2023-50332