CVE-2019-13337

CVE-2019-13337 describes a critical authentication bypass vulnerability in WESEEK GROWI versions prior to 3.5.0. An attacker can bypass the site-wide basic authentication by appending an "access_token" URL parameter, even without a valid token, allowing unauthorized access to the website. This vulnerability has a CVSS score of 7.5 (HIGH), indicating a network-exploitable flaw with low attack complexity and high impact on integrity, but no impact on confidentiality or availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.