GROWI has a vulnerability in its collaborative editing feature where a missing authorization check allows users with read-only or limited statuses to modify page drafts. This affects users including guests and those with pending, suspended, or invited statuses.