CVE-2019-13338

In WESEEK GROWI before 3.5.0, a remote attacker can obtain the password hash of the creator of a page by leveraging wiki access to make API calls for page…

published July 9, 2019

CVSS
—
EPSS
2%
Percentile
78.3
In the wild
Unconfirmed
What it is

In WESEEK GROWI before 3.5.0, a remote attacker can obtain the password hash of the creator of a page by leveraging wiki access to make API calls for page metadata. In other words, the password hash can be retrieved even though it is not a publicly available field.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01802 · 78.3th percentile
Published
2019-07-09T19:27Z
EPSS history
Timeline
  • 09 JUL 19:27Z
    In WESEEK GROWI before 3.5.0, a remote attacker can obtain the password hash of the creator of a page by leveraging wiki access to make API calls for page…
    cvelistv5