CyberRota Analysis
AI-GeneratedGROWI is vulnerable to an authorization bypass in its bookmark folder APIs, allowing authenticated attackers to manipulate other users' bookmark data by exploiting a user-controlled key. This could lead to unauthorized access, data tampering, or deletion of sensitive information. Organizations using GROWI should prioritize addressing this vulnerability to protect user data integrity and maintain security.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
GROWI contains a vulnerability with an authorization bypass through user-controlled key in the bookmark folder APIs. If this vulnerability is exploited, an authenticated attacker could retrieve, tamper with, and/or delete the other user's bookmark data.