CVE-2020-10563

DEVOME GRR

CVE-2020-10562

DEVOME GRR before 3.4.1c contains a vulnerability in admin_edit_room.php that mishandles file uploads. Per CNVD-2020-24685, this could let a remote attacker execute code. Upgrading to 3.4.1c (released as GRR v3.4.1c) is the documented remediation.