CVE-2019-5969

Open redirect vulnerability in GROWI v3.4.6 and earlier allows remote attackersto redirect users to arbitrary web sites and conduct phishing attacks via the process of login...

CVE-2019-5969

CVE-2019-5969 is an open redirect vulnerability in WESEEK GROWI (v3.4.6 and earlier) that allows a logged-in user to be redirected to an arbitrary site via the login flow. The clinical detail across connected sources consistently identifies the affected product as GROWI, with the vulnerability oc...

JVN#84876282: Multiple vulnerabilities in GROWI

GROWI provided by WESEEK, Inc. contains multiple vulnerabilities listed below. Cross-site request forgery vulnerability in the process of updating user's "Basic Info" CWE-352 - CVE-2019-5968 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N| Base Score: 4.3...