https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:30:04 +0000 https://db.gcve.eu/vuln/cve-2026-84204 <p><strong>Affected:</strong> growilabs growi</p> <p>GROWI contains an access control vulnerability in the GET /_api/v3/attachment/:id endpoint that fails to validate page access permissions. Authenticated attackers can retrieve attachment metadata from pages they cannot view by supplying known attachment identifiers.</p> <p><strong>Affected:</strong> growilabs growi</p> <p>GROWI contains an access control vulnerability in the GET /_api/v3/attachment/:id endpoint that fails to validate page access permissions. Authenticated attackers can retrieve attachment metadata from pages they cannot view by supplying known attachment identifiers.</p> https://db.gcve.eu/vuln/cve-2026-84204