CVE-2023-50332
Improper Authorization in GROWI User Management (/admin/users)
GROWI のユーザー管理 (/admin/users) における不適切な認可
In GROWI v6.0.6 and earlier versions, it is possible to delete or deactivate the administrator’s own account by directly interacting with the API.
Disclosure Date
2023/12/13
Credit
azara (@a_zara_n)