PT-2026-127726
CVE-2026-105272
·
Published
2026-10-28
·
Updated
2026-10-28
Description by
CVSS 3.1
4.2
MediumMetricsAV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
GROWI contains an authorization bypass vulnerability in its page viewing and commenting functionality due to improper use of a user-controlled key. By exploiting this vulnerability, an authenticated attacker may obtain the contents and comments of pages without the required read permission.
Found an issue in the description? Have something to add? Feel free to write us 👾