CVE-2021-20736

2021-06-2201:35:50

jpcert

www.cve.org

nosql injection

growi

database vulnerability

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

48.0%

JSON

NoSQL injection vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to obtain and/or alter the information stored in the database via unspecified vectors.

CNA Affected

[
  {
    "product": "GROWI",
    "vendor": "WESEEK, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to v4.2.20"
      }
    ]
  }
]