Unscored CVE-2021-20736 EUVD-2021-8150GHSA-wjfh-82xx-qrx6

NoSQL injection vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to obtain and/or alter the information stored in …

Published Jun 22, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Description

NoSQL injection vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to obtain and/or alter the information stored in the database via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
WESEEK	GROWI	versions prior to v4.2.20	—

References

https://weseek.co.jp/security/2021/06/14/vulnerability/growi-nosql-ingection/
https://jvn.jp/en/jp/JVN95457785/index.html