https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-14T00:19:07.056457+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-115624 fkie_cve-2026-115624 2026-11-14T00:19:07.059437+00:00

GROWI contains a missing authorization check vulnerability in its collaborative editing feature. By exploiting this vulnerability, a user with read-only permission, including a guest user, or a user in pending, suspended, or invited status may modify page drafts.

 https://db.gcve.eu/vuln/ghsa-xq8c-mmcj-8f9f GHSA-xq8c-mmcj-8f9f 2026-11-14T00:19:07.059500+00:00

GROWI contains a missing authorization check vulnerability in its collaborative editing feature. By exploiting this vulnerability, a user with read-only permission, including a guest user, or a user in pending, suspended, or invited status may modify page drafts.

 https://db.gcve.eu/vuln/jvndb-2026-000156 jvndb-2026-000156 2026-11-14T00:19:07.059519+00:00

GROWI provided by GROWI, Inc. contains multiple vulnerabilities listed below:<a href='https://cwe.mitre.org/data/definitions/639.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/639.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/862.html' target='_blank'></a><ul><li>Authorization bypass through user-controlled key in the page view and comment feature (CWE-639) - CVE-2026-105272</li><li>Authorization bypass through user-controlled key in the tag update API and the page update API (CWE-639) - CVE-2026-109848</li><li>Missing authorization in the collaborative editing feature (CWE-862) - CVE-2026-115624</li></ul>GROWI, Inc. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN. JPCERT/CC and GROWI, Inc. coordinated under the Information Security Early Warning Partnership.