CVE-2020-5683: Path Traversal
First published: Wed Dec 16 2020(Updated: )
Directory traversal vulnerability in GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series), and GROWI v3 series and earlier GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series), and GROWI v3 series and earlier allows remote attackers to alter the data by uploading a specially crafted file.
Credit: vultures@jpcert.or.jp
| Affected Software | Affected Version | How to fix |
|---|---|---|
| WESEEK GROWI | <=3.8.2 | |
| WESEEK GROWI | >=4.1.0<4.1.12 | |
| WESEEK GROWI | >=4.2.0<4.2.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/author
- agent/description
- agent/event
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-index
- vendor/weseek
- canonical/weseek growi
- version/weseek growi/3.8.2
- version/weseek growi/4.1.0
- version/weseek growi/4.2.0