GROWI Cross-Site Request Forgery Vulnerability
Vulnerability
A cross-site request forgery (CSRF) vulnerability exists in GROWI versions prior to 7.3.4. This vulnerability allows an attacker to trick a logged-in user into performing unintended actions by exploiting the user's session.
Impact
Exploitation of this vulnerability could lead to unauthorized actions being performed on behalf of the user.
Remediation
Users are advised to update GROWI to version 7.3.4 or later. The updated version can be downloaded from GitHub or Docker Hub.
Added: Dec 17, 2025, 5:17 AM
Updated: Dec 17, 2025, 5:17 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
6.4remediation
7.7relevance
1.5threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.