Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-41799 1 Weseek 1 Growi 2025-05-07 6.5 Medium
Improper access control vulnerability in GROWI prior to v5.1.4 (v5 series) and versions prior to v4.5.25 (v4 series) allows a remote authenticated attacker to bypass access restriction and download the markdown data from the pages set to private by the other users.
CVE-2022-1236 1 Weseek 1 Growi 2024-11-21 6.5 Medium
Weak Password Requirements in GitHub repository weseek/growi prior to v5.0.0.