JVN#57544707: GROWI vulnerable to cross-site scripting

GROWI provided by WESEEK, Inc. contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update the software to the latest version according to the information provided by the developer. Products Affect...

PT-2021-14080 · Growi · Growi

Name of the Vulnerable Software and Affected Versions: GROWI versions prior to 4.2.3 Description: A cross-site scripting issue allows remote attackers to inject an arbitrary script via unspecified vectors. Recommendations: For versions prior to 4.2.3, update to version 4.2.3 or later to resolve t...

WESEEK GROWI Directory Traversal Vulnerability

GROWI is a team collaboration software. A directory traversal vulnerability exists in WESEEK GROWI, which can be exploited by remote attackers to alter data by uploading specially crafted files...

WESEEK GROWI Input Validation Error Vulnerability

GROWI is a team collaboration software. WESEEK GROWI suffers from an input validation error vulnerability that can be exploited by remote attackers to cause a denial of service...

CVE-2020-5683

Directory traversal vulnerability in GROWI versions prior to v4.2.3 v4.2 Series, GROWI versions prior to v4.1.12 v4.1 Series, and GROWI v3 series and earlier GROWI versions prior to v4.2.3 v4.2 Series, GROWI versions prior to v4.1.12 v4.1 Series, and GROWI v3 series and earlier allows remote...

CVE-2020-5683

Directory traversal vulnerability in GROWI versions prior to v4.2.3 v4.2 Series, GROWI versions prior to v4.1.12 v4.1 Series, and GROWI v3 series and earlier GROWI versions prior to v4.2.3 v4.2 Series, GROWI versions prior to v4.1.12 v4.1 Series, and GROWI v3 series and earlier allows remote...

CVE-2020-5682

Improper input validation in GROWI versions prior to v4.2.3 v4.2 Series, GROWI versions prior to v4.1.12 v4.1 Series, and GROWI v3 series and earlier GROWI versions prior to v4.2.3 v4.2 Series, GROWI versions prior to v4.1.12 v4.1 Series, and GROWI v3 series and earlier allows remote attackers to...

CVE-2020-5682

Improper input validation in GROWI versions prior to v4.2.3 v4.2 Series, GROWI versions prior to v4.1.12 v4.1 Series, and GROWI v3 series and earlier GROWI versions prior to v4.2.3 v4.2 Series, GROWI versions prior to v4.1.12 v4.1 Series, and GROWI v3 series and earlier allows remote attackers to...

Input validation

Improper input validation in GROWI versions prior to v4.2.3 v4.2 Series, GROWI versions prior to v4.1.12 v4.1 Series, and GROWI v3 series and earlier GROWI versions prior to v4.2.3 v4.2 Series, GROWI versions prior to v4.1.12 v4.1 Series, and GROWI v3 series and earlier allows remote attackers to...

Directory traversal

Directory traversal vulnerability in GROWI versions prior to v4.2.3 v4.2 Series, GROWI versions prior to v4.1.12 v4.1 Series, and GROWI v3 series and earlier GROWI versions prior to v4.2.3 v4.2 Series, GROWI versions prior to v4.1.12 v4.1 Series, and GROWI v3 series and earlier allows remote...

CVE-2020-5682

Improper input validation in GROWI versions prior to v4.2.3 v4.2 Series, GROWI versions prior to v4.1.12 v4.1 Series, and GROWI v3 series and earlier GROWI versions prior to v4.2.3 v4.2 Series, GROWI versions prior to v4.1.12 v4.1 Series, and GROWI v3 series and earlier allows remote attackers to...

CVE-2020-5683

Directory traversal vulnerability in GROWI versions prior to v4.2.3 v4.2 Series, GROWI versions prior to v4.1.12 v4.1 Series, and GROWI v3 series and earlier GROWI versions prior to v4.2.3 v4.2 Series, GROWI versions prior to v4.1.12 v4.1 Series, and GROWI v3 series and earlier allows remote...

CVE-2020-5683

CVE-2020-5683 is a directory traversal vulnerability in WESEEK GROWI. A remote attacker can alter data by uploading a specially crafted file. Affected products/versions: GROWI prior to v4.2.3 (v4.2 series), GROWI prior to v4.1.12 (v4.1 series), and GROWI v3 series and earlier. Mitigation: update ...

CVE-2020-5683

Directory traversal vulnerability in GROWI versions prior to v4.2.3 v4.2 Series, GROWI versions prior to v4.1.12 v4.1 Series, and GROWI v3 series and earlier GROWI versions prior to v4.2.3 v4.2 Series, GROWI versions prior to v4.1.12 v4.1 Series, and GROWI v3 series and earlier allows remote...

CVE-2020-5682

Improper input validation in GROWI versions prior to v4.2.3 v4.2 Series, GROWI versions prior to v4.1.12 v4.1 Series, and GROWI v3 series and earlier GROWI versions prior to v4.2.3 v4.2 Series, GROWI versions prior to v4.1.12 v4.1 Series, and GROWI v3 series and earlier allows remote attackers to...

CVE-2020-5682

CVE-2020-5682: A DoS vulnerability in WESEEK GROWI caused by improper input validation across multiple releases. Affected are GROWI v3 series and earlier, and v4.x series prior to v4.2.3 (v4.2) and prior to v4.1.12 (v4.1). Root cause is improper input validation that can be exploited remotely, wi...

CVE-2020-5682: Improper Input Validation

Improper input validation in GROWI versions prior to v4.2.3 v4.2 Series, GROWI versions prior to v4.1.12 v4.1 Series, and GROWI v3 series and earlier GROWI versions prior to v4.2.3 v4.2 Series, GROWI versions prior to v4.1.12 v4.1 Series, and GROWI v3 series and earlier allows remote attackers to...

PT-2020-18643

Name of the Vulnerable Software and Affected Versions GROWI versions prior to v4.2.3 GROWI versions prior to v4.1.12 GROWI v3 series and earlier Description A directory traversal vulnerability allows remote attackers to alter data by uploading a specially crafted file. This issue enables attacker...

PT-2020-18642

Name of the Vulnerable Software and Affected Versions GROWI versions prior to v4.2.3 GROWI versions prior to v4.1.12 GROWI v3 series and earlier Description The issue is caused by improper input validation, allowing remote attackers to cause a denial of service via unspecified vectors...

CVE-2020-5683: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in GROWI versions prior to v4.2.3 v4.2 Series, GROWI versions prior to v4.1.12 v4.1 Series, and GROWI v3 series and earlier GROWI versions prior to v4.2.3 v4.2 Series, GROWI versions prior to v4.1.12 v4.1 Series, and GROWI v3 series and earlier allows remote...