WESEEK, Inc. GROWI vulnerabilities

CVEs per yearBy the year they were published

1. 20184
2. 20194
3. 20205
4. 20218
5. 202313

Newest CVEs

• CVE-2023-42436

  Stored cross-site scripting vulnerability exists in the presentation feature of GROWI versions prior to v3.4.0. If this vulnerability is exploited, an…

  WESEEK, Inc. · GROWI

  Medium5.4
• CVE-2023-50332

  Improper authorization vulnerability exists in the User Management (/admin/users) page of GROWI versions prior to v6.0.6. If this vulnerability is exploited, a…

  WESEEK, Inc. · GROWI

  Medium6.5
• CVE-2023-50294

  The App Settings (/admin/app) page in GROWI versions prior to v6.0.6 stores sensitive information in cleartext form. As a result, the Secret access key for…

  WESEEK, Inc. · GROWI

  Medium6.5
• CVE-2023-50175

  Stored cross-site scripting vulnerability exists in the App Settings (/admin/app) page, the Markdown Settings (/admin/markdown) page, and the Customize…

  WESEEK, Inc. · GROWI

  Medium5.4
• CVE-2023-49807

  Stored cross-site scripting vulnerability when processing the MathJax exists in GROWI versions prior to v6.0.0. If this vulnerability is exploited, an…

  WESEEK, Inc. · GROWI

  Medium5.4
• CVE-2023-49779

  Stored cross-site scripting vulnerability exists in the anchor tag of GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script…

  WESEEK, Inc. · GROWI

  Medium5.4
• CVE-2023-49598

  Stored cross-site scripting vulnerability exists in the event handlers of the pre tags in GROWI versions prior to v6.0.0. If this vulnerability is exploited,…

  WESEEK, Inc. · GROWI

  Medium5.4
• CVE-2023-49119

  Stored cross-site scripting vulnerability via the img tags exists in GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script…

  WESEEK, Inc. · GROWI

  Medium5.4
• CVE-2023-47215

  Stored cross-site scripting vulnerability which is exploiting a behavior of the XSS Filter exists in GROWI versions prior to v6.0.0. If this vulnerability is…

  WESEEK, Inc. · GROWI

  Medium5.4
• CVE-2023-46699

  Cross-site request forgery (CSRF) vulnerability exists in the User settings (/me) page of GROWI versions prior to v6.0.0. If a user views a malicious page…

  WESEEK, Inc. · GROWI

  Medium4.3