CVE-2021-20670
Improper access control vulnerability in GROWI versions v4.2.2 and earlier allows a remote unauthenticated attacker to read the user's personal inform...
Original description
The description as published by the source.
Improper access control vulnerability in GROWI versions v4.2.2 and earlier allows a remote unauthenticated attacker to read the user's personal information and/or server's internal information via unspecified vectors.
References
- advisory jvn.jp
- advisory weseek.co.jp