https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T06:19:57.910931+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-25644 cnvd-2019-25644 2026-10-12T06:19:57.988017+00:00 cnvd-2019-25644 https://cve.radiocsirt.org/vuln/euvd-2026-50619 EUVD-2026-50619 2026-10-12T06:19:57.988051+00:00 EUVD-2026-50619 https://cve.radiocsirt.org/vuln/fkie_cve-2019-5968 fkie_cve-2019-5968 2026-10-12T06:19:57.988065+00:00

Cross-site request forgery (CSRF) vulnerability in GROWI v3.4.6 and earlier allows remote attackers to hijack the authentication of administrators via updating user's 'Basic Info'.

 https://cve.radiocsirt.org/vuln/ghsa-6m9j-rg23-c25r GHSA-6m9j-rg23-c25r 2026-10-12T06:19:57.988095+00:00

Cross-site request forgery (CSRF) vulnerability in GROWI v3.4.6 and earlier allows remote attackers to hijack the authentication of administrators via updating user's 'Basic Info'.

 https://cve.radiocsirt.org/vuln/gsd-2019-5968 gsd-2019-5968 2026-10-12T06:19:57.988111+00:00 gsd-2019-5968 https://cve.radiocsirt.org/vuln/jvndb-2019-000033 jvndb-2019-000033 2026-10-12T06:19:57.988121+00:00

GROWI provided by WESEEK, Inc. contains multiple vulnerabilities listed below. * Cross-site request forgery vulnerability in the process of updating user's "Basic Info" (CWE-352) - CVE-2019-5968 * Open redirect vulnerability in the process of login (CWE-601) - CVE-2019-5969 Security Group of DeCurret Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.