CVE-2025-64700CWE-352csrf

CVE-2025-64700

Medium · published December 17, 2025

CVSS v3.0
4.3
EPSS
0%
Percentile
2.0
In the wild
Unconfirmed
What it is

Cross-site request forgery vulnerability exists in GROWI v7.3.3 and earlier. If a user views a malicious page while logged in, the user may be tricked to do unintended operations.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00125 · 2.0th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2025-12-17T10:16Z
References (2)
https://growi.co.jp/news/40/ · [email protected]https://jvn.jp/en/jp/JVN55745775/ · [email protected]
EPSS history
Timeline
  • 17 DEC 04:06Z
    Cross-site request forgery vulnerability exists in GROWI v7.3.3 and earlier
    cvelistv5