CVE-2025-43880 | THREATINT

Description

Inefficient regular expression complexity issue exists in GROWI prior to v7.1.6. If exploited, a logged-in user may cause a denial of service (DoS) condition.

Reserved 2025-06-13 | Published 2025-06-25 | Updated 2025-06-25 | Assigner jpcert

MEDIUM: 4.3CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

MEDIUM: 5.3CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Problem types

Inefficient regular expression complexity

Product status

prior to v7.1.6

affected

References

github.com/weseek/growi/pull/9487

jvn.jp/en/jp/JVN21624250/

cve.org (CVE-2025-43880)

nvd.nist.gov (CVE-2025-43880)

Download JSON