CVE-2021-20671
Invalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker with administrative privilege to overwrite the files o...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Invalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker with administrative privilege to overwrite the files on the server, which may lead to arbitrary code execution.
Références
- advisory jvn.jp
- advisory weseek.co.jp