CVE-2021-20670
Improper Access Control leading to Information Leakage in GROWI (GROWI におけるアクセス制限の不備)
Improper access control of files allows an unauthenticated remote attacker to read the user's personal information and/or server's internal information
Disclosure Date
2021/03/07
Credit
stypr (@stereotype32)
Affected-Versions
GROWI: v4.2.2 and earlier
CWE
- CWE-284
