CVE-2023-50294

The App Settings (/admin/app) page in GROWI versions prior to v6.0.6 stores sensitive information in cleartext form

published December 26, 2023

CVSS
—
EPSS
0%
Percentile
23.4
In the wild
Unconfirmed
What it is

The App Settings (/admin/app) page in GROWI versions prior to v6.0.6 stores sensitive information in cleartext form. As a result, the Secret access key for external service may be obtained by an attacker who can access the App Settings page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00317 · 23.4th percentile
Published
2023-12-26T07:21Z
EPSS history
Timeline
  • 26 DEC 07:21Z
    The App Settings (/admin/app) page in GROWI versions prior to v6.0.6 stores sensitive information in cleartext form
    cvelistv5