CVE-2020-5682

Denial of Service (DoS) in GROWI (GROWI における入力値の検証不備に起因するサービス運用妨害 (DoS))

Improper input validation in GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series), and GROWI v3 series and earlier GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series), and GROWI v3 series and earlier allows remote attackers to cause a denial of service via unspecified vectors.

Disclosure Date

2021/12/14

Credit

azara (@a_zara_n)

Affected-Versions

GROWI: v4.2.3 and earlier, v4.1.12 and earlier, v3 series and earlier

CWE

  • CWE-400

Product-URLs

Back