Naoya Miyaguchi

The issue is related to improper input validation, allowing a remote authenticated attacker to execute arbitrary code by uploading a specially crafted SVG file.

A stored cross-site scripting vulnerability exists, exploiting a behavior of the XSS Filter. If this issue is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.

A stored cross-site scripting issue exists in the event handlers of the `pre` tags. If exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.

A stored cross-site scripting issue exists in the anchor tag of GROWI. If exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.

A stored cross-site scripting issue exists when processing MathJax. This could allow an arbitrary script to be executed on the user's web browser if the vulnerability is exploited.

A stored cross-site scripting issue exists in the App Settings (/admin/app) page, the Markdown Settings (/admin/markdown) page, and the Customize (/admin/customize) page. This could allow an arbitrary script to be executed on the web browser of the user who accessed the site using the product.

Name of the Vulnerable Software and Affected Versions: GROWI versions 4.2.0 through 4.2.7 Description: The issue is related to a reflected cross-site scripting vulnerability due to insufficient verification of URL query parameters. This allows remote attackers to inject an arbitrary script via unspecified vectors. Recommendations: For versions 4.2.0 through 4.2.7, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GROWI versions 4.2.0 through 4.2.7 Description: A stored cross-site scripting issue in the Admin Page of GROWI allows remote authenticated attackers to inject an arbitrary script via unspecified vectors. Recommendations: For versions 4.2.0 through 4.2.7, update to a version that contains a fix for this issue to prevent exploitation.