Unscored CVE-2021-20619 EUVD-2021-8037GHSA-j45x-3263-vc7w

Cross-site scripting vulnerability in GROWI (v4.2 Series) versions prior to v4.2.3 allows remote attackers to inject an arbitrary script vi…

Published Jan 19, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: WESEEK Product: GROWI (v4.2 Series)

Description

Cross-site scripting vulnerability in GROWI (v4.2 Series) versions prior to v4.2.3 allows remote attackers to inject an arbitrary script via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
WESEEK	GROWI v4.2 Series	versions prior to v4.2.3	—

References

https://github.com/weseek/growi
https://weseek.co.jp/security/2021/01/18/vulnerability/growi-prevent-xss4/
https://jvn.jp/en/jp/JVN57544707/index.html