CVE-2021-20736

2021-06-2202:15:07

Google

osv.dev

nosql injection

growi

database vulnerability

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

48.0%

JSON

NoSQL injection vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to obtain and/or alter the information stored in the database via unspecified vectors.

References

jvn.jp/en/jp/JVN95457785/index.html

weseek.co.jp/security/2021/06/14/vulnerability/growi-nosql-ingection/