CVE-2021-20671
Remote Code Execution in GROWI (GROWI における不適切な入力検証)
Invalid file validation on the upload feature allows a remote attacker with administrative privilege to overwrite the files on the server, which may lead to arbitrary code execution
Disclosure Date
2021/03/07
Credit
stypr (@stereotype32)
Affected-Versions
GROWI: v4.2.2 and earlier
CWE
- CWE-20
