CVE-2021-20829: XSS
Published Sep 21, 2021
·Updated
Cross-site scripting vulnerability due to the inadequate tag sanitization in GROWI versions v4.2.19 and earlier allows remote attackers to execute an arbitrary script on the web browser of the user who accesses a specially crafted page.
Affected Software
1 affected component
WESEEK GROWI<=4.2.19
Event History
Sep 21, 2021
CVE Published
via MITRE·09:25 AM
Data Sourced
via MITRE·09:25 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-20829?
CVE-2021-20829 is categorized as a moderate severity cross-site scripting vulnerability.
2
How do I fix CVE-2021-20829?
To fix CVE-2021-20829, update GROWI to version 4.2.20 or later.
3
What versions of GROWI are affected by CVE-2021-20829?
GROWI versions v4.2.19 and earlier are affected by CVE-2021-20829.
4
What are the potential impacts of CVE-2021-20829?
CVE-2021-20829 allows remote attackers to execute arbitrary scripts on a user's web browser.
5
Is user input susceptible to exploitation in CVE-2021-20829?
Yes, inadequate tag sanitization in CVE-2021-20829 makes user input vulnerable to exploitation.