Most recent entries from all

cnvd-2019-25644

EUVD-2026-50619

fkie_cve-2019-5968

Cross-site request forgery (CSRF) vulnerability in GROWI v3.4.6 and earlier allows remote attackers to hijack the authentication of administrators via updating user's 'Basic Info'.

GHSA-6m9j-rg23-c25r

Cross-site request forgery (CSRF) vulnerability in GROWI v3.4.6 and earlier allows remote attackers to hijack the authentication of administrators via updating user's 'Basic Info'.

gsd-2019-5968

jvndb-2019-000033

GROWI provided by WESEEK, Inc. contains multiple vulnerabilities listed below. * Cross-site request forgery vulnerability in the process of updating user's "Basic Info" (CWE-352) - CVE-2019-5968 * Open redirect vulnerability in the process of login (CWE-601) - CVE-2019-5969 Security Group of DeCurret Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.