Growi · Growi · CVE-2020-5683
**Name of the Vulnerable Software and Affected Versions**
GROWI versions prior to v4.2.3
GROWI versions prior to v4.1.12
GROWI v3 series and earlier
**Description**
A directory traversal vulnerability allows remote attackers to alter data by uploading a specially crafted file. This issue enables attackers to potentially modify or access unauthorized parts of the system.
**Recommendations**
For GROWI versions prior to v4.2.3, update to version v4.2.3 or later.
For GROWI versions prior to v4.1.12, update to version v4.1.12 or later.
For GROWI v3 series and earlier, update to a version later than v4.1.12 or v4.2.3, as these versions are no longer supported.