PT-2025-26809 · Growi · Growi

·

CVE-2025-43880

·

Published

2025-06-25

·

Updated

2025-06-25

CVSS v4.0

5.3

Medium

VectorAV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions: GROWI versions prior to 7.1.6
Description: The issue is related to inefficient regular expression complexity, which can be exploited by a logged-in user to cause a denial of service (DoS) condition.
Recommendations: For versions prior to 7.1.6, update to version 7.1.6 or later to resolve the issue.

Exploit

Fix

DoS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-43880

Affected Products

Growi