CVE-2021-20737

MEDIUM

GROWI < 4.2.20 - Unauthenticated Unauthorized Page Access

Title source: llm
STIX 2.1

Description

Improper authentication vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to view the unauthorized pages without access privileges via unspecified vectors.

References (2)

Core 2
Core References
Third Party Advisory x_refsource_misc
https://jvn.jp/en/jp/JVN95457785/index.html

Scores

CVSS v3 6.5
EPSS 0.0105
EPSS Percentile 60.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-287
Status published
Products (1)
weseek/growi < 4.2.20
Published Jun 22, 2021
Tracked Since Feb 18, 2026