National Cyber Warfare Foundation (NCWF)

Missing authorization in the OpenAI thread message API endpoints of GROWI

0 user ratings

2026-03-16 05:00:39
milo
Developers

GROWI provided by GROWI, Inc. contains a missing authorization vulnerability in the OpenAI thread/message API endpoints.

Missing authorization in the OpenAI thread/message API endpoints of GROWI
https://jvn.jp/en/jp/JVN46373837/
GROWI provided by GROWI, Inc. contains a missing authorization vulnerability in the OpenAI thread/message API endpoints.
JVN
[email protected]
JVN#46373837
https://jvn.jp/en/jp/JVN46373837/
2026-03-16T14:00:00+09:00
2026-03-16T14:00:00+09:00
2026-03-16T14:00:00+09:00

Source: Japan Vulnerability Notes
Source Link: https://jvn.jp/en/jp/JVN46373837/

Comments	new comment
Nobody has commented yet. Will you be the first?

Forum

Developers

Missing authorization in the OpenAI thread message API endpoints of GROWI

Comments