CVE-2023-49779

Summary

CVE-2023-49779 refers to a stored cross-site scripting (XSS) vulnerability discovered in the anchor tag of GROWI, an open-source wiki and knowledge management system. This issue affects versions of GROWI prior to v6.0.0. If successfully exploited, an attacker can inject and execute malicious scripts in the browser of users who access the affected site through the product. This poses a significant security risk, as it can lead to information disclosure, unauthorized access, or other malicious activities. It is recommended that users upgrade to the latest version of GROWI to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.