VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Oct 24, 2022· Updated Jun 17, 2026

CVE-2022-41799

CVE-2022-41799

Description

Improper access control vulnerability in GROWI prior to v5.1.4 (v5 series) and versions prior to v4.5.25 (v4 series) allows a remote authenticated attacker to bypass access restriction and download the markdown data from the pages set to private by the other users.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Weseek/Growi
    cpe:2.3:a:weseek:growi:*:*:*:*:*:*:*:*
    Range: >=4.0.0,<4.5.25
  • GROWI/GROWIllm-fuzzy
    Range: <5.1.4, <4.5.25
  • WESEEK, Inc./GROWI v5 series and v4 seriesv5
    Range: versions prior to v5.1.4 (v5 series) and versions prior to v4.5.25 (v4 series)

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.