Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

GROWI — Vulnerabilities & Security Advisories 48

All 48 CVE vulnerabilities found in GROWI, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses affecting the GROWI open-source knowledge base platform developed by Weseed. The collection encompasses a wide spectrum of reported flaws, including remote code execution, cross-site scripting, and privilege escalation issues, covering the period from the product's initial public release through the most recent security advisories. Readers can utilize this resource to track the vendor's ongoing vulnerability disclosures, analyze the specific characteristics and impact of the weakness classes affecting GROWI, or review the complete historical record of security incidents associated with this software. The data presented here is compiled from official vendor bulletins, public security databases, and community reports to provide a comprehensive view of the platform's security posture over time. By centralizing these findings, the page enables security professionals and system administrators to efficiently assess risk, prioritize remediation efforts, and understand the evolution of threats targeting GROWI deployments. This continuous aggregation ensures that stakeholders have immediate access to the latest critical information required for maintaining secure and resilient knowledge management environments without needing to consult multiple disparate sources.

Vendor: WESEEK, Inc.

CVE ID Title CVSS Severity Published
CVE-2026-100727 GROWI未授权读取文件漏洞 CWE-552 6.9 Medium 2026-10-05
CVE-2026-84204 GROWI through 8.0.2 Missing Authorization on apiv3 Attachment Retrieval CWE-862 6.5 Medium 2026-09-01
CVE-2026-84205 GROWI through 8.0.2 Authorization Bypass Through User-Controlled Key on apiv3 Revision Retrieval CWE-639 6.5 Medium 2026-09-01
CVE-2026-53620 GROWI 授权问题漏洞 CWE-639 5.3 Medium 2026-08-31
CVE-2026-68951 GROWI 授权问题漏洞 CWE-863 6.9 Medium 2026-08-31
CVE-2026-80191 GROWI before 8.0.2 Missing Authorization on Attachment Retrieval for Unauthenticated Requests CWE-862 7.5 High 2026-08-25
CVE-2026-41951 GROWI 路径遍历漏洞 CWE-22 - - 2026-05-11
CVE-2026-41040 GROWI 安全漏洞 CWE-1333 7.5AI High AI 2026-04-23
CVE-2026-26291 GROWI 安全漏洞 CWE-79 5.4 - 2026-04-15
CVE-2026-25083 Weseek Growi 安全漏洞 CWE-862 5.4AI Medium AI 2026-03-16
CVE-2025-64700 Weseek Growi 跨站请求伪造漏洞 CWE-352 8.8AI High AI 2025-12-17
CVE-2025-61994 Weseek Growi 跨站脚本漏洞 CWE-79 6.1 - 2025-11-06
CVE-2025-54806 Weseek Growi 跨站脚本漏洞 CWE-79 6.1AI Medium AI 2025-10-23
CVE-2025-43880 Weseek Growi 安全漏洞 CWE-1333 6.5AI Medium AI 2025-06-25
CVE-2023-42436 Weseek GROWI 安全漏洞 4.8AI Medium AI 2023-12-26
CVE-2023-50332 Weseek GROWI 安全漏洞 8.1AI High AI 2023-12-26
CVE-2023-50294 Weseek GROWI 安全漏洞 4.9AI Medium AI 2023-12-26
CVE-2023-50175 Weseek GROWI 安全漏洞 4.8AI Medium AI 2023-12-26
CVE-2023-49807 Weseek GROWI 安全漏洞 5.4AI Medium AI 2023-12-26
CVE-2023-49779 Weseek GROWI 跨站脚本漏洞 4.8AI Medium AI 2023-12-26
CVE-2023-49598 Weseek GROWI 安全漏洞 4.8AI Medium AI 2023-12-26
CVE-2023-49119 Weseek GROWI 安全漏洞 4.8AI Medium AI 2023-12-26
CVE-2023-47215 WESEEK GROWI 安全漏洞 4.8AI Medium AI 2023-12-26
CVE-2023-46699 WESEEK GROWI 安全漏洞 4.3AI Medium AI 2023-12-26
CVE-2023-45740 WESEEK GROWI 安全漏洞 5.4AI Medium AI 2023-12-26
CVE-2023-45737 Weseek GROWI 安全漏洞 4.8AI Medium AI 2023-12-26
CVE-2023-50339 Weseek GROWI 安全漏洞 4.8AI Medium AI 2023-12-26
CVE-2021-20829 GROWI 及更早跨站脚本漏洞 6.1 - 2021-09-21
CVE-2021-20737 Weseek GROWI 授权问题漏洞 4.3 - 2021-06-22
CVE-2021-20736 Weseek GROWI 注入漏洞 9.1 - 2021-06-22

All 48 known CVE vulnerabilities affecting GROWI with full Chinese analysis, references, and POCs where available.