description: Improper authorization vulnerability exists in the User Management (/admin/users) page of GROWI versions prior to v6.0.6. If this vulnerability is exploited, a user may delete or suspend its own account without the user's intention.
problem types: Improper authorization
affected:
{
vendor: WESEEK, Inc.
product: GROWI
versions:
version: prior to v6.0.6, status: affected
}