Vendors / growilabs Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now growilabs records in CISA KEV No growilabs vulnerabilities are listed in CISA KEV.
Priority LOW 31
GROWI contains an access control vulnerability in the GET /_api/v3/revisions/:id endpoint that validates access against a query parameter but returns the revision identified by the path parameter without confirming they…
CVSS 4.0 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00415 · Published 2026-09-01 · No fix listed CWE-639
Priority LOW 31
GROWI contains an access control vulnerability in the GET /_api/v3/attachment/:id endpoint that fails to validate page access permissions.
CVSS 4.0 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00415 · Published 2026-09-01 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
0 2 0 0 0
