Lucene search

GoogleOSV:CVE-2021-20670

HistoryMar 10, 2021 - 10:15 a.m.

CVE-2021-20670

2021-03-1010:15:12

Google

osv.dev

cve-2021-20670

vulnerability

growi

access control

remote attacker

personal information

server

unauthenticated

AI Score

6.7

Confidence

Low

EPSS

0.003

Percentile

69.9%

JSON

Improper access control vulnerability in GROWI versions v4.2.2 and earlier allows a remote unauthenticated attacker to read the user’s personal information and/or server’s internal information via unspecified vectors.

References

jvn.jp/en/vu/JVNVU94889258/index.html

weseek.co.jp/security/2021/03/08/vulnerability/growi-prevent-multiple-xss/