Known vulnerabilities in GROWI

Software: GROWI
Software CPE: cpe:2.3:a:weseek:growi:*:*:*:*:*:*:*:*
Total vulnerabilities: 38
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GROWI GROWI is affected by 38 known vulnerabilities: 10 medium, 28 low Critical High Medium Low

Vulnerabilities (38)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146040 - Incorrect Authorization
CVE-2026-68951
CWE-863 Medium
No
No
8.0.1 28.08.2026 SB2026082829
#VU146039 - Authorization Bypass Through User-Controlled Key
CVE-2026-53620
CWE-639 Medium
No
No
8.0.1 28.08.2026 SB2026082829
#VU130922 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-41951
CWE-22 Low
No
No
7.5.1 11.05.2026 SB2026051132
#VU126878 - Inefficient Regular Expression Complexity
CVE-2026-41040
CWE-1333 Medium
No
No
7.5.1 23.04.2026 SB2026042318
#VU126493 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-26291
CWE-79 Low
No
No
7.4.7 20.04.2026 SB2026042020
#VU121127 - Cross-Site Request Forgery (CSRF)
CVE-2025-64700
CWE-352 Low
No
No
7.3.4 09.01.2026 SB2026010919
#VU118146 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-61994
CWE-79 Low
No
No
7.2.10 06.11.2025 SB2025110614
#VU117468 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-54806
CWE-79 Low
No
No
4.2.8 22.10.2025 SB2025102270
#VU111860 - Inefficient Regular Expression Complexity
CVE-2025-43880
CWE-1333 Medium
No
No
7.1.6 24.06.2025 SB2025062415
#VU84484 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-50339
CWE-79 Low
No
No
6.1.11 15.12.2023 SB2023121535
#VU84483 - Improper Authorization
CVE-2023-50332
CWE-285 Low
No
No
6.0.6 15.12.2023 SB2023121534
#VU84482 - Cleartext Storage of Sensitive Information
CVE-2023-50294
CWE-312 Low
No
No
6.0.6 15.12.2023 SB2023121534
#VU84481 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-50175
CWE-79 Low
No
No
6.0.0 15.12.2023 SB2023121533
#VU84480 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-49807
CWE-79 Low
No
No
6.0.0 15.12.2023 SB2023121533
#VU84479 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-49779
CWE-79 Low
No
No
6.0.0 15.12.2023 SB2023121533
#VU84478 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-49598
CWE-79 Low
No
No
6.0.0 15.12.2023 SB2023121533
#VU84477 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-49119
CWE-79 Low
No
No
6.0.0 15.12.2023 SB2023121533
#VU84476 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-47215
CWE-79 Low
No
No
6.0.0 15.12.2023 SB2023121533
#VU84475 - Cross-Site Request Forgery (CSRF)
CVE-2023-46699
CWE-352 Low
No
No
6.0.0 15.12.2023 SB2023121533
#VU84473 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-45740
CWE-79 Low
No
No
4.1.3 15.12.2023 SB2023121532


Showing elements 1 - 20 out of 38