MEDIUM 5.3 NVD

CVE-2026-53620

GROWI contains a vulnerability with an authorization bypass through user-controlled key in the bookmark folder APIs. If this vulnerability is exploited, an auth

GROWI contains a vulnerability with an authorization bypass through user-controlled key in the bookmark folder APIs. If this vulnerability is exploited, an authenticated attacker could retrieve, tamper with, and/or delete the other user's bookmark data.

References

https://growi.co.jp/news/46/
https://jvn.jp/en/jp/JVN42348352/

Published: 2026-08-31 · Source: NVD · Feed updated: 2026-08-31

This medium severity vulnerability with a CVSS score of 5.3 was published on 2026-08-31 via NVD.

vulnfeed aggregates 11521 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.