CVE-2020-5682

HIGH

GROWI < 3.8.2 - Denial of Service via Uncontrolled Resource Consumption

Title source: llm

Description

Improper input validation in GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series), and GROWI v3 series and earlier GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series), and GROWI v3 series and earlier allows remote attackers to cause a denial of service via unspecified vectors.

References (3)

Core 3

Core References

Product, Third Party Advisory x_refsource_misc

https://github.com/weseek/growi

Product, Third Party Advisory x_refsource_misc

https://hub.docker.com/r/weseek/growi/

Third Party Advisory x_refsource_misc

https://jvn.jp/en/jp/JVN94169589/index.html

Scores

CVSS v3 7.5

EPSS 0.0196

EPSS Percentile 77.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-20 CWE-400

Status published

Products (1)

weseek/growi < 3.8.2

Published Dec 16, 2020

Tracked Since Feb 18, 2026