Disclosure Date 2021/12/14
CVE-2020-5682
Denial of Service (DoS) in GROWI
GROWI における入力値の検証不備に起因するサービス運用妨害 (DoS)
Credit
azara (@a_zara_n)
Affected-Versions
GROWI: v4.2.3 and earlier, v4.1.12 and earlier, v3 series and earlier
CWE
- CWE-400
Description
Improper input validation in GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series), and GROWI v3 series and earlier GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series), and GROWI v3 series and earlier allows remote attackers to cause a denial of service via unspecified vectors.
