CVE-2021-20671

Invalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker with administrative privilege to overwrite the files o...

Original description

The description as published by the source.

Invalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker with administrative privilege to overwrite the files on the server, which may lead to arbitrary code execution.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory jvn.jp
advisory weseek.co.jp