CVE-2023-45737 - CVE House
Back to Database
Status published Unknown CVE-2023-45737

Stored cross-site scripting vulnerability exists in the App Settings (/admin/app)...

Vulnerability Description

Stored cross-site scripting vulnerability exists in the App Settings (/admin/app) page and the Markdown Settings (/admin/markdown) page of GROWI versions prior to v3.5.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-45737

Credits & Attribution

No credits recorded in the NVD database.

References

More from WESEEK, Inc.

View All →
CVE-2023-50339
Stored cross-site scripting vulnerability exists in the User Management (/admin/users)...
Unknown 0
CVE-2023-50332
Improper authorization vulnerability exists in the User Management (/admin/users) page...
Unknown 0
CVE-2023-50294
The App Settings (/admin/app) page in GROWI versions prior to...
Unknown 0
CVE-2023-50175
Stored cross-site scripting vulnerability exists in the App Settings (/admin/app)...
Unknown 0
CVE-2023-49807
Stored cross-site scripting vulnerability when processing the MathJax exists in...
Unknown 0

Affected Vendor

WESEEK, Inc.

View all reports →

Affected Software

GROWI
Vulnerable Versions:
prior to v3.5.0

Timeline

Official Publish: December 26th, 2023
Last Modified: August 2nd, 2024
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.