CVE-2023-46699

Cross-site request forgery (CSRF) vulnerability exists in the User settings (/me) page of GROWI versions prior to v6.0.0

published December 26, 2023

CVSS
—
EPSS
0%
Percentile
7.0
In the wild
Unconfirmed
What it is

Cross-site request forgery (CSRF) vulnerability exists in the User settings (/me) page of GROWI versions prior to v6.0.0. If a user views a malicious page while logging in, settings may be changed without the user's intention.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00178 · 7.0th percentile
Published
2023-12-26T07:20Z
EPSS history
Timeline
  • 26 DEC 07:20Z
    Cross-site request forgery (CSRF) vulnerability exists in the User settings (/me) page of GROWI versions prior to v6.0.0
    cvelistv5