PT-2020-18642
CVE-2020-5682
·
Published
2020-12-16
·
Updated
2021-07-21
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
GROWI versions prior to v4.2.3
GROWI versions prior to v4.1.12
GROWI v3 series and earlier
Description
The issue is caused by improper input validation, allowing remote attackers to cause a denial of service via unspecified vectors.
Recommendations
For GROWI versions prior to v4.2.3, update to version v4.2.3 or later.
For GROWI versions prior to v4.1.12, update to version v4.1.12 or later.
For GROWI v3 series and earlier, update to a version later than v3.
Found an issue in the description? Have something to add? Feel free to write us 👾