Unscored CVE-2021-20737 EUVD-2021-8151GHSA-4g63-gwp6-h4r5

Improper authentication vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to view the unauthorized pages without ac…

Published Jun 22, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Description

Improper authentication vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to view the unauthorized pages without access privileges via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
WESEEK	GROWI	versions prior to v4.2.20	—

References

https://weseek.co.jp/security/2021/06/14/vulnerability/growi-nosql-ingection/
https://jvn.jp/en/jp/JVN95457785/index.html