Vulnerability Database

318,756

Total vulnerabilities in the database

CVE-2022-41799

Improper access control vulnerability in GROWI prior to v5.1.4 (v5 series) and versions prior to v4.5.25 (v4 series) allows a remote authenticated attacker to bypass access restriction and download the markdown data from the pages set to private by the other users.

  • Published: Oct 24, 2022
  • Updated: Nov 16, 2025
  • CVE: CVE-2022-41799
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWEs:

Software From Fixed in
weseek / growi 5.0.0 5.1.4
weseek / growi 4.0.0 4.5.25