LOW 2.3 NVD
CVE-2026-105272
GROWI contains an authorization bypass vulnerability in its page viewing and commenting functionality due to improper use of a user-controlled key. By exploitin
GROWI contains an authorization bypass vulnerability in its page viewing and commenting functionality due to improper use of a user-controlled key. By exploiting this vulnerability, an authenticated attacker may obtain the contents and comments of pages without the required read permission.
References
- https://github.com/growilabs/growi/security/advisories/GHSA-m72c-xgjf-56ww
- https://growi.co.jp/news/48/
- https://jvn.jp/en/jp/JVN51223238/
This low severity vulnerability with a CVSS score of 2.3 was published on 2026-10-28 via NVD.
vulnfeed aggregates 17800 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.