CVE-2023-49779: XSS
Stored cross-site scripting vulnerability exists in the anchor tag of GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-49779?
CVE-2023-49779 is classified as a stored cross-site scripting vulnerability, which can have significant security implications for affected users.
How do I fix CVE-2023-49779?
To mitigate CVE-2023-49779, upgrade GROWI to version 6.0.0 or later, where the vulnerability has been addressed.
Which versions of GROWI are affected by CVE-2023-49779?
CVE-2023-49779 affects all GROWI versions prior to 6.0.0.
What can an attacker do with CVE-2023-49779?
An attacker can exploit CVE-2023-49779 to execute arbitrary scripts in the browser of users accessing the vulnerable GROWI site.
Is user interaction required for CVE-2023-49779 exploit?
Yes, user interaction is required as the exploit occurs when the user visits a compromised site enhanced by the vulnerability.