CVE-2023-50332 (published 2023-12-26T07:21:24.393Z)
Improper authorization vulnerability exists in the User Management (/admin/users) page of GROWI versions prior to v6.0.6. If this vulnerability is exploited, a user may delete or suspend its own account without the user's intention.

Affected products: Vendor: WESEEK, Inc.
Product: GROWI
Versions: prior to v6.0.6