CVE-2019-5969
First published: Fri Jul 05 2019(Updated: )
Open redirect vulnerability in GROWI v3.4.6 and earlier allows remote attackersto redirect users to arbitrary web sites and conduct phishing attacks via the process of login.
Credit: vultures@jpcert.or.jp
| Affected Software | Affected Version | How to fix |
|---|---|---|
| WESEEK GROWI | <=3.4.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-5969 vulnerability?
CVE-2019-5969 is an open redirect vulnerability in GROWI v3.4.6 and earlier versions that allows remote attackers to redirect users to arbitrary websites for phishing attacks during the login process.
How severe is CVE-2019-5969?
CVE-2019-5969 has a severity of 6.1, classified as medium.
How can I fix CVE-2019-5969?
To fix CVE-2019-5969, users should update GROWI to a version beyond v3.4.6 to mitigate the open redirect vulnerability.
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/weseek
- canonical/weseek growi
- version/weseek growi/3.4.6