CVE-2021-20737

2021-06-2201:35:51

jpcert

www.cve.org

vulnerability

growi

authentication

remote attacker

unauthorized pages

access privileges

unspecified vectors

AI Score

7.2

Confidence

High

EPSS

0.002

Percentile

53.1%

JSON

Improper authentication vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to view the unauthorized pages without access privileges via unspecified vectors.

CNA Affected

[
  {
    "product": "GROWI",
    "vendor": "WESEEK, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to v4.2.20"
      }
    ]
  }
]