CVE-2023-49779
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Summary
CVE-2023-49779 refers to a stored cross-site scripting (XSS) vulnerability discovered in the anchor tag of GROWI, an open-source wiki and knowledge management system. This issue affects versions of GROWI prior to v6.0.0. If successfully exploited, an attacker can inject and execute malicious scripts in the browser of users who access the affected site through the product. This poses a significant security risk, as it can lead to information disclosure, unauthorized access, or other malicious activities. It is recommended that users upgrade to the latest version of GROWI to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Weseek Growi
Affected Vendors
- Weseek
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions