What is GHSA-xwvv-h48v-hrrm?

GHSA-xwvv-h48v-hrrm is a security advisory published by GitHub Security Advisories with Medium severity. GROWI contains a vulnerability with an authorization bypass through user-controlled key in the...

Which CVE IDs does GHSA-xwvv-h48v-hrrm cover?

GHSA-xwvv-h48v-hrrm covers the following CVE IDs: CVE-2026-53620. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-xwvv-h48v-hrrm?

GHSA-xwvv-h48v-hrrm has a CVSS v3 base score of 6.3, published by GitHub Security Advisories.

GHSA-xwvv-h48v-hrrmMediumCVSS 6.3

GROWI contains a vulnerability with an authorization bypass through user-controlled key in the...

Vendor

GitHub Security Advisories

Published

August 31, 2026

Last Modified

August 31, 2026

🔗 CVE IDs covered (1)

CVE-2026-53620 →

📋 Description

GROWI contains a vulnerability with an authorization bypass through user-controlled key in the bookmark folder APIs. If this vulnerability is exploited, an authenticated attacker could retrieve, tamper with, and/or delete the other user's bookmark data.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-53620
https://growi.co.jp/news/46
https://jvn.jp/en/jp/JVN42348352
https://github.com/advisories/GHSA-xwvv-h48v-hrrm