CVE-2022-41799
Improper access control vulnerability in GROWI prior to v5.1.4 (v5 series) and versions prior to v4.5.25 (v4 series) allows a remote authenticated attacker to bypass access rest…
Published: 2022-10-24 · CVSS: 6.5 · CVSS 3.1
Improper access control vulnerability in GROWI prior to v5.1.4 (v5 series) and versions prior to v4.5.25 (v4 series) allows a remote authenticated attacker to bypass access restriction and download the markdown data from the pages set to private by the other users.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7