CVE-2021-20671
Invalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker with administrative privilege to overwrite the files o...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Invalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker with administrative privilege to overwrite the files on the server, which may lead to arbitrary code execution.
参照URL
- advisory jvn.jp
- advisory weseek.co.jp