CVE-2026-68951

MEDIUM CVSS 5.3 View on NVD ↗

Description

GROWI contains an incorrect authorization vulnerability. If this vulnerability is exploited, an unauthenticated attacker could retrieve the other user's bookmark data.

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References

https://growi.co.jp/news/46/
https://jvn.jp/en/jp/JVN42348352/

Published: Aug 31, 2026 07:17 UTC Modified: Aug 31, 2026 19:33 UTC