Detections
Analytics
CVE-2021-20670
high
Description
Improper access control vulnerability in GROWI versions v4.2.2 and earlier allows a remote unauthenticated attacker to read the user's personal information and/or server's internal information via unspecified vectors.
References
https://weseek.co.jp/security/2021/03/08/vulnerability/growi-prevent-multiple-xss/