PT-2019-17902

Name of the Vulnerable Software and Affected Versions GROWI versions prior to 3.4.7 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators by updating a user's Basic Info. Recommendations For versions prior to 3.4.7, update to version...

PT-2019-17903

Name of the Vulnerable Software and Affected Versions GROWI versions 3.4.6 and earlier Description The issue allows remote attackers to redirect users to arbitrary web sites, potentially conducting phishing attacks through the login process. Recommendations For GROWI versions 3.4.6 and earlier, a...

CVE-2019-5969: URL Redirection to Untrusted Site

Open redirect vulnerability in GROWI v3.4.6 and earlier allows remote attackersto redirect users to arbitrary web sites and conduct phishing attacks via the process of login...

WESEEK GROWI Input Validation Error Vulnerability

WESEEK GROWI is a suite of team collaboration software from WESEEK Japan. An input validation error vulnerability exists in the login process in WESEEK GROWI 3.4.6 and prior versions. The vulnerability originates from a network system or product that does not properly validate input data. An...

WESEEK GROWI Cross-Site Request Forgery Vulnerability

WESEEK GROWI is a suite of team collaboration software from WESEEK Japan. A cross-site request forgery vulnerability exists in the process of updating a user's basic information in WESEEK GROWI 3.4.6 and prior versions. The vulnerability stems from the WEB application not adequately verifying tha...

JVN#84876282: Multiple vulnerabilities in GROWI

GROWI provided by WESEEK, Inc. contains multiple vulnerabilities listed below. Cross-site request forgery vulnerability in the process of updating user's "Basic Info" CWE-352 - CVE-2019-5968 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N| Base Score: 4.3...

CVE-2018-16205

Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via New Page modal...

CVE-2018-16205

Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via New Page modal...

CVE-2018-0698

Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0698

Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via New Page modal...

CVE-2018-16205

Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via New Page modal...

CVE-2018-0698

Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0698

CVE-2018-0698 affects WESEEK/GROWI up to v3.2.3, where a cross-site scripting (XSS) vulnerability could allow remote attackers to inject arbitrary script via unspecified vectors. The issue is documented across multiple sources (NVD, JVN and CVE listings) with the impact described as arbitrary scr...

CVE-2018-16205

Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via New Page modal...

CVE-2018-16205

CVE-2018-16205 is a Cross-Site Scripting vulnerability in GROWI versions up to 3.2.3 (and earlier). The root cause is a flaw in the processing of the New Page modal that allows remote attackers to inject arbitrary script or HTML into a user’s browser. Affected software is GROWI v3.2.3 and earlier...

CVE-2018-0698

Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2019-8703

Name of the Vulnerable Software and Affected Versions GROWI versions 3.2.3 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions 3.2.3 and earlier, update to a version later than 3.2.3 to resolve the issue...

PT-2019-9269

Name of the Vulnerable Software and Affected Versions GROWI versions 3.2.3 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the New Page modal. Recommendations For GROWI versions 3.2.3 and earlier, at the moment, there is no...