Skip to content

Weseek Growi vulnerabilities

growi, inc. growiGROWI v4.2.7 and earlier contains a cross-site scripting vulnerability in the page alert...CVE-2025-548065.1 MediumOctober 23, 2025
growi, inc. growiStored cross-site scripting vulnerability exists in the presentation feature of GROWI versions...CVE-2023-424365.4 MediumDecember 26, 2023
growi, inc. growiImproper authorization vulnerability exists in the User Management (/admin/users) page of GROWI...CVE-2023-503326.5 MediumDecember 26, 2023
growi, inc. growiThe App Settings (/admin/app) page in GROWI versions prior to v6.0.6 stores sensitive information...CVE-2023-502946.5 MediumDecember 26, 2023
growi, inc. growiStored cross-site scripting vulnerability exists in the App Settings (/admin/app) page, the...CVE-2023-501755.4 MediumDecember 26, 2023
growi, inc. growiStored cross-site scripting vulnerability when processing the MathJax exists in GROWI versions...CVE-2023-498075.4 MediumDecember 26, 2023
growi, inc. growiStored cross-site scripting vulnerability exists in the anchor tag of GROWI versions prior to v6...CVE-2023-497795.4 MediumDecember 26, 2023
growi, inc. growiStored cross-site scripting vulnerability exists in the event handlers of the pre tags in GROWI...CVE-2023-495985.4 MediumDecember 26, 2023
growi, inc. growiStored cross-site scripting vulnerability via the img tags exists in GROWI versions prior to v6.0...CVE-2023-491195.4 MediumDecember 26, 2023
growi, inc. growiStored cross-site scripting vulnerability which is exploiting a behavior of the XSS Filter exists...CVE-2023-472155.4 MediumDecember 26, 2023
growi, inc. growiCross-site request forgery (CSRF) vulnerability exists in the User settings (/me) page of GROWI...CVE-2023-466994.3 MediumDecember 26, 2023
growi, inc. growiStored cross-site scripting vulnerability when processing profile images exists in GROWI versions...CVE-2023-457405.4 MediumDecember 26, 2023
growi, inc. growiStored cross-site scripting vulnerability exists in the App Settings (/admin/app) page and the...CVE-2023-457375.4 MediumDecember 26, 2023
growi, inc. growiStored cross-site scripting vulnerability exists in the User Management (/admin/users) page of...CVE-2023-503395.4 MediumDecember 26, 2023
weseek growi, weseek, inc. growi v5 series and v4 series +1 moreImproper access control vulnerability in GROWI prior to v5.1.4 (v5 series) and versions prior to...CVE-2022-417996.5 MediumOctober 24, 2022
weseek growi, weseek/growi +1 moreWeak Password Requirements in weseek/growiCVE-2022-12364.3 MediumApril 5, 2022
weseek growi, weseek/growi +1 moreAuthorization Bypass Through User-Controlled Key in weseek/growiCVE-2021-38526.3 MediumJanuary 12, 2022
growi, inc. growiCross-site scripting vulnerability due to the inadequate tag sanitization in GROWI versions v4.2...CVE-2021-208296.1 MediumSeptember 21, 2021
growi, inc. growiImproper authentication vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker...CVE-2021-207376.5 MediumJune 22, 2021
growi, inc. growiNoSQL injection vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to...CVE-2021-207369.1 CriticalJune 22, 2021
weseek growi, weseek, inc. growi (v4.2 series) +1 moreStored cross-site scripting vulnerability in Admin Page of GROWI (v4.2 Series) versions from v4.2...CVE-2021-206734.8 MediumMarch 10, 2021
weseek growi, weseek, inc. growi (v4.2 series) +1 moreReflected cross-site scripting vulnerability due to insufficient verification of URL query...CVE-2021-206726.1 MediumMarch 10, 2021
growi, inc. growiInvalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker...CVE-2021-206717.2 HighMarch 10, 2021
growi, inc. growiImproper access control vulnerability in GROWI versions v4.2.2 and earlier allows a remote...CVE-2021-206707.5 HighMarch 10, 2021
growi, inc. growiPath traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with...CVE-2021-206694.7 MediumMarch 10, 2021
growi, inc. growiPath traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with...CVE-2021-206682.7 LowMarch 10, 2021
growi, inc. growiStored cross-site scripting vulnerability due to inadequate CSP (Content Security Policy)...CVE-2021-206675.4 MediumMarch 10, 2021
weseek growi, weseek, inc. growi v4.2 series +1 moreCross-site scripting vulnerability in GROWI (v4.2 Series) versions prior to v4.2.3 allows remote...CVE-2021-206196.1 MediumJanuary 19, 2021
growi, inc. growiDirectory traversal vulnerability in GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions...CVE-2020-56837.5 HighDecember 16, 2020
growi, inc. growiImproper input validation in GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior...CVE-2020-56827.5 HighDecember 16, 2020
growi, inc. growiStored cross-site scripting vulnerability in GROWI v3.8.1 and earlier allows remote attackers to...CVE-2020-56786.1 MediumDecember 3, 2020
growi, inc. growiReflected cross-site scripting vulnerability in GROWI v4.0.0 and earlier allows remote attackers...CVE-2020-56776.1 MediumDecember 3, 2020
growi, inc. growiGROWI v4.1.3 and earlier allow remote attackers to obtain information which is not allowed to...CVE-2020-56767.5 HighDecember 3, 2020
weseek growiIn WESEEK GROWI before 3.5.0, the site-wide basic authentication can be bypassed by adding a URL...CVE-2019-133377.5 HighJuly 9, 2019
weseek growiIn WESEEK GROWI before 3.5.0, a remote attacker can obtain the password hash of the creator of a...CVE-2019-133387.5 HighJuly 9, 2019
growi, inc. growiOpen redirect vulnerability in GROWI v3.4.6 and earlier allows remote attackersto redirect users...CVE-2019-59696.1 MediumJuly 5, 2019
growi, inc. growiCross-site request forgery (CSRF) vulnerability in GROWI v3.4.6 and earlier allows remote...CVE-2019-59688.8 HighJuly 5, 2019
growi, inc. growiCross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject...CVE-2018-162055.4 MediumJanuary 9, 2019
growi, inc. growiCross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject...CVE-2018-06985.4 MediumJanuary 9, 2019
growi, inc. growiCross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated...CVE-2018-06554.8 MediumSeptember 7, 2018
growi, inc. growiCross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to...CVE-2018-06546.1 MediumSeptember 7, 2018
growi, inc. growiCross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to...CVE-2018-06536.1 MediumSeptember 7, 2018
growi, inc. growiCross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated...CVE-2018-06524.8 MediumSeptember 7, 2018