Kenta Yamamoto

**Name of the Vulnerable Software and Affected Versions** GROWI versions prior to 5.1.4 GROWI versions prior to 4.5.25 **Description** The issue allows a remote authenticated attacker to bypass access restrictions and download markdown data from pages set to private by other users. **Recommendations** For versions prior to 5.1.4, update to version 5.1.4 or later. For versions prior to 4.5.25, update to version 4.5.25 or later.

**Name of the Vulnerable Software and Affected Versions** Markdown on Save Improved plugin versions prior to 2.5.1 **Description** A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML. **Recommendations** For versions prior to 2.5.1, update to version 2.5.1 or later to resolve the issue.