Known vulnerabilities in GROWI - page 2

Software: GROWI
Software CPE: cpe:2.3:a:weseek:growi:*:*:*:*:*:*:*:*
Total vulnerabilities: 38
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GROWI GROWI is affected by 38 known vulnerabilities: 10 medium, 28 low Critical High Medium Low

Vulnerabilities (38)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU84472 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-45737
CWE-79 Low
No
No
3.5.0 15.12.2023 SB2023121529
#VU84470 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-42436
CWE-79 Low
No
No
3.4.0 15.12.2023 SB2023121528
#VU67976 - Improper Access Control
CVE-2022-41799
CWE-284 Low
No
No
4.5.25, 5.1.4 07.10.2022 SB2022100702
#VU64233 - Weak Password Requirements
CVE-2022-1236
CWE-521 Medium
No
No
5.0.0 14.06.2022 SB2022061406
#VU54084 - Improper Authentication
CVE-2021-20737
CWE-287 Low
No
No
4.2.20 14.06.2021 SB2021061403
#VU54083 - Improper Neutralization of Special Elements in Data Query Logic
CVE-2021-20736
CWE-943 Medium
No
No
4.2.20 14.06.2021 SB2021061403
#VU51366 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20673
CWE-79 Low
No
No
4.2.8 10.03.2021 SB2021031004
#VU51365 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20672
CWE-79 Low
No
No
4.2.8 10.03.2021 SB2021031004
#VU49595 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20619
CWE-79 Low
No
No
4.2.3 19.01.2021 SB2021011901
#VU48982 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-5683
CWE-22 Low
No
No
4.1.12, 4.2.3 15.12.2020 SB2020121516
#VU48981 - Resource exhaustion
CVE-2020-5682
CWE-400 Medium
No
No
4.1.12, 4.2.3 15.12.2020 SB2020121516
#VU48642 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5678
CWE-79 Low
No
No
4.1.5 25.11.2020 SB2020112501
#VU48641 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5677
CWE-79 Low
No
No
4.1.5 25.11.2020 SB2020112501
#VU48640 - Exposure of sensitive information to an unauthorized actor
CVE-2020-5676
CWE-200 Medium
No
No
4.1.5 25.11.2020 SB2020112501
#VU35733 - Improper Authentication
CVE-2019-13337
CWE-287 Medium
No
No
3.5.0 09.07.2019 SB2019070920
#VU35734 - Exposure of sensitive information to an unauthorized actor
CVE-2019-13338
CWE-200 Medium
No
No
3.5.0 09.07.2019 SB2019070920
#VU18894 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-5969
CWE-601 Low
No
No
3.4.7 24.06.2019 SB2019060709
#VU18893 - Cross-Site Request Forgery (CSRF)
CVE-2019-5968
CWE-352 Low
No
No
3.4.7 24.06.2019 SB2019060709


Showing elements 21 - 40 out of 38