CVE-2023-50339: XSS
Published Dec 26, 2023
·Updated
Stored cross-site scripting vulnerability exists in the User Management (/admin/users) page of GROWI versions prior to v6.1.11. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.
Affected Software
1 affected component
WESEEK GROWI<6.1.11
Event History
Dec 26, 2023
CVE Published
07:20 AM
Data Sourced
07:20 AM
DescriptionWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-50339?
CVE-2023-50339 is classified as a stored cross-site scripting vulnerability that poses a significant risk to user data.
2
How do I fix CVE-2023-50339?
To fix CVE-2023-50339, upgrade GROWI to version 6.1.11 or later.
3
What versions are affected by CVE-2023-50339?
CVE-2023-50339 affects GROWI versions prior to 6.1.11.
4
What can attackers do with CVE-2023-50339?
Attackers exploiting CVE-2023-50339 can execute arbitrary scripts on the browsers of users accessing the vulnerable site.
5
Where is CVE-2023-50339 found in GROWI?
CVE-2023-50339 is found in the User Management section, specifically on the (/admin/users) page.